Skip to content

Issues: orcwg/cra-hub

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

90 Open 8 Closed
90 Open 8 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Meta: Can we add labels for "Manufacturer" and "Steward" for questions?
#126 opened Jan 30, 2025 by sethmlarson
If I monetize my project, do the manufacturer obligations only apply to my relationships with my customers or to all uses of my software?
#125 opened Jan 30, 2025 by jmaris
1
FAQ Manufacturer Can Open Source Software Stewards provide documentation on behalf of projects to be consumed by manufacturers?
#122 opened Jan 30, 2025 by aosull01
FAQ manufacturer What are the obligations of a manufacturer for an open source project that disappears?
#121 opened Jan 30, 2025 by aosull01
FAQ Steward: Does Article 24.3 obligate most Stewards to anything?
#120 opened Jan 30, 2025 by sethmlarson
FAQ Does each open-source project have to have a Manufacturer identified necessarily?
#114 opened Jan 30, 2025 by rozhukov
how can we explain, before public drafts of the standards, what level of generality is expected?
#113 opened Jan 30, 2025 by tieguy
FAQ As a Manufacturer how do I approach conformity assessment (aka CE marking) if I consume open-source components?
#112 opened Jan 30, 2025 by rozhukov
FAQ - Manufacturer: What happens if/when an open source project ceases to exist?
#111 opened Jan 30, 2025 by boogiespook
1
FAQ Manufacturer - To enable easier early machine readable risk assessment of open source components for manufactures what available tools/searchable artifacts can it use?
#110 opened Jan 30, 2025 by aosull01
FAQ Manufacturer: Does the CRA apply to government orgs/depts that publish/maintain open source?
#108 opened Jan 30, 2025 by thecorconian
1
FAQ Manufacturer: If an OSS project does something to 'help' ease Manufacturer burden, what if any obligations imposed on OSS project
#107 opened Jan 30, 2025 by thecorconian
How should a manufacturer reach out to an open source project when a vulnerability is found?
#106 opened Jan 30, 2025 by ilonkasie
1
FAQ Manufacturer: If ultimately I as a manufacturer am responsible fIs there an opportunity for Foundations to facilitate projects to do 'something' that minimizes the amount of duplicate effort of Manufacturers?
#105 opened Jan 30, 2025 by thecorconian
FAQ Manufacturer: Is there any open source project that is considered to be a Manufacturer as defined by the CRA?
#104 opened Jan 30, 2025 by thecorconian
2
FAQ Manufacturer - How will we report to the Single Vulnerability Reporting entity?
#103 opened Jan 30, 2025 by boogiespook
FAQ Manufacturer: Is there a way to be steward for a project and at the same time use the project as part of a product?
#102 opened Jan 30, 2025 by hseuschek
What kind of (internal/technical) documentation is required as a manufacturer to prove conformity of my used open source packages?
#101 opened Jan 30, 2025 by BANANAS1337
4
FAQ Manufacturer - Collaboration with "Single Vulnerability Reporting" entity
#100 opened Jan 30, 2025 by boogiespook
FAQ Manufacturer - Is there a standard proforma/format for completing due diligence of open source projects?
#99 opened Jan 30, 2025 by boogiespook
What kind of software dependencies do I have to consider as a manufacturer?
#97 opened Jan 30, 2025 by ilonkasie
4
FAQ - manufacturer - How should a manufacturer refer to CRA compliance attestations of the open source projects if consumes if such attestation's exist?
#96 opened Jan 30, 2025 by aosull01
FAQ If I'm as a (big) Manufacturer decided to support/contribute to small open-source project, does it put Manufacturer's responsibility to me FOR that project?
#95 opened Jan 30, 2025 by rozhukov
2
FAQ Manufacturer - Can I use SBOMs created by upstream projects?
#94 opened Jan 30, 2025 by boogiespook
FAQ/Manufacturer: What is the required support period for products under the CRA
#93 opened Jan 30, 2025 by BANANAS1337
2
ProTip! Add no:assignee to see everything that’s not assigned.