About 1/2 of those 41 (previously 44) are going to be specific to particular verticals, so likely won’t impact open source too much, but the rest are going to be work.
It’s going to be interesting to see how ecosystems (like pypi) implement tooling to help maintainers who want to comply opt-in. eg, most of the package ecosystems still don’t really support SPDX or SBOMs very well—will they have incentives (or EU-provided resources?) to move quicker on CRA-related metadata/fields?
Luis Villa
npub1zr…ezzng
2025-01-30 09:45:54 UTC
in reply to nevent1q…frek
Author Public Key
npub1zr7al5mjf2kq7vpddk4wkegqnnpk79y3jvp6vtkqr6fkvrhlke7qaezzngSeen on
wss://relay.momostr.pinkPublished at
2025-01-30 09:45:54 UTCEvent JSON
{
"id": "5725bf6f3d2250b1bf47b1a40710358bee3204ec0b743b499e2463c40726ecab",
"pubkey": "10fddfd3724aac0f302d6daaeb65009cc36f14919303a62ec01e93660effb67c",
"created_at": 1738230354,
"kind": 1,
"tags": [
[
"e",
"a9c83f920cb5945a1336ce2b7afd8bff0719459e95d40460a9a5a5846b7a8c27",
"",
"reply",
"10fddfd3724aac0f302d6daaeb65009cc36f14919303a62ec01e93660effb67c"
],
[
"proxy",
"https://social.coop/@luis_in_brief/113916664483810053",
"web"
],
[
"p",
"2b91c37ecf5aac4ea7f923f5bcb7b3f7768cb0b288fcc394fd534c0b4216c56d"
],
[
"p",
"537ba211ddf49768a49a5f6bd95a130212df4accb5005c67fcf6d77962763ae8"
],
[
"e",
"3335dbc7179bcc35e2c8629cf8ac1d174ed65624b0a7997caacd39a45e988bfd",
"",
"root",
"10fddfd3724aac0f302d6daaeb65009cc36f14919303a62ec01e93660effb67c"
],
[
"p",
"10fddfd3724aac0f302d6daaeb65009cc36f14919303a62ec01e93660effb67c"
],
[
"proxy",
"https://social.coop/users/luis_in_brief/statuses/113916664483810053",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://social.coop/users/luis_in_brief/statuses/113916664483810053",
"pink.momostr"
],
[
"-"
]
],
"content": "About 1/2 of those 41 (previously 44) are going to be specific to particular verticals, so likely won’t impact open source too much, but the rest are going to be work.\n\nIt’s going to be interesting to see how ecosystems (like pypi) implement tooling to help maintainers who want to comply opt-in. eg, most of the package ecosystems still don’t really support SPDX or SBOMs very well—will they have incentives (or EU-provided resources?) to move quicker on CRA-related metadata/fields?",
"sig": "4cfea58a245cb5f69850a317201b189c979e55c230c25b184ddeb9992246ba8111022848dfa20c29310d74a5737ba86c7b59be9416332b85d2cf6c92c6778edb"
}