--- title: FOSDEM 2026: Open Source Supply Chains, CRA Compliance,... description: FOSDEM 2026 brought together 8,000 developers in Brussels, revealing a critical shift in open source: the hardest challenges are no longer purely technical but... canonical: https://daily.dev/posts/fosdem-2026-open-source-supply-chains-cra-compliance-and-the-future-of-software-rkr6n5bnz twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: FOSDEM 2026: Open Source Supply Chains, CRA Compliance, and the Future of Software | daily.dev og:description: FOSDEM 2026 brought together 8,000 developers in Brussels, revealing a critical shift in open source: the hardest challenges are no longer purely technical but... og:url: https://daily.dev/posts/fosdem-2026-open-source-supply-chains-cra-compliance-and-the-future-of-software-rkr6n5bnz og:image: https://api.daily.dev/og/posts/rKr6n5bnz.png og:image:alt: FOSDEM 2026: Open Source Supply Chains, CRA Compliance, and the Future of Software og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # FOSDEM 2026: Open Source Supply Chains, CRA Compliance, and the Future of Software **[Foojay.io](https://daily.dev/sources/foojayio)** · 7 min read · 0 upvotes · 0 comments ## Summary FOSDEM 2026 brought together 8,000 developers in Brussels, revealing a critical shift in open source: the hardest challenges are no longer purely technical but involve legal compliance, supply chain security, and economic sustainability. The Cyber Resilience Act (CRA) is reshaping expectations around liability and responsibility, while funding models remain unclear. Key takeaways include the need to intimately know your software supply chain, maintain efficient CI/CD pipelines for routine updates, and establish clear support postures for all components including open source dependencies. The era of "free" open source is evolving as compliance requirements and infrastructure costs force organizations to be more selective about what they consume. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [CRA Compliance: A Wake-up Call for Open Source](https://daily.dev/posts/cra-compliance-a-wake-up-call-for-open-source-xvwzazq8s) · OpenSSF · 0 upvotes · 0 comments - [Making the Cyber Resilience Act Work for Open Source](https://daily.dev/posts/making-the-cyber-resilience-act-work-for-open-source-ri1ckviqk) · The New Stack · 0 upvotes · 0 comments - [The EU CRA Doesn’t Change What Good Open Source Governance Looks Like. It Just Makes the Accountability Visible.](https://daily.dev/posts/the-eu-cra-doesn-t-change-what-good-open-source-governance-looks-like-it-just-makes-the-accountabil-ktb7v0fog) · Security Boulevard · 0 upvotes · 0 comments - [Taking Stock of the State of European Cyber Resilience Act \(CRA\) Compliance: An Urgent Wake-up Call for the Open Source Ecosystem](https://daily.dev/posts/taking-stock-of-the-state-of-european-cyber-resilience-act-cra-compliance-an-urgent-wake-up-call--6yezrqnee) · Linux Foundation · 0 upvotes · 0 comments - [The CRA's unexpected effect on open source](https://daily.dev/posts/the-cra-s-unexpected-effect-on-open-source-ar0xsubmk) · Giant Swarm · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#open-source](https://daily.dev/tags/open-source), [#cicd](https://daily.dev/tags/cicd), [#compliance](https://daily.dev/tags/compliance), [#sbom](https://daily.dev/tags/sbom) [View this post on daily.dev](https://daily.dev/posts/fosdem-2026-open-source-supply-chains-cra-compliance-and-the-future-of-software-rkr6n5bnz) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"FOSDEM 2026: Open Source Supply Chains, CRA Compliance, and the Future of Software","url":"https://daily.dev/posts/fosdem-2026-open-source-supply-chains-cra-compliance-and-the-future-of-software-rkr6n5bnz","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/fosdem-2026-open-source-supply-chains-cra-compliance-and-the-future-of-software-rkr6n5bnz"},"datePublished":"2026-02-02T22:52:55.104Z","dateModified":"2026-02-02T22:53:20.394Z","description":"FOSDEM 2026 brought together 8,000 developers in Brussels, revealing a critical shift in open source: the hardest challenges are no longer purely technical but...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8099735b9a08014e9e2f6ebad5958055?_a=AQAEulh","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8099735b9a08014e9e2f6ebad5958055?_a=AQAEulh","isAccessibleForFree":true,"articleSection":"Foojay.io","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Foojay.io","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/1820f6a6ae944760aa322b67ed85f848","url":"https://daily.dev/sources/foojayio"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/fosdem-2026-open-source-supply-chains-cra-compliance-and-the-future-of-software-rkr6n5bnz","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,open-source,cicd,compliance,sbom","timeRequired":"PT7M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Foojay.io","item":"https://daily.dev/sources/foojayio"},{"@type":"ListItem","position":3,"name":"FOSDEM 2026: Open Source Supply Chains, CRA Compliance, and the Future of Software"}]} ```