The July 2026 OpenSSF Newsletter covers the upcoming Community Day Europe in Prague (October 6), a new eBook on EU Cyber Resilience Act (CRA) compliance, and an explainer on dependency firewalls for blocking malicious packages before installation. It also highlights OpenSSF's outreach at AfricaCyberFest (7+ new contributors), podcast episodes on AI/ML artifact signing and the Alpha-Omega $20M milestone, and multiple project releases including OpenBao v2.6.0/v2.6.1, OSV Schema v1.8.0, and Minder v0.2.2. Regulatory updates include new European Commission CRA guidance, ENISA's SME CRA Survey Report, and the Secure by Design and Default Playbook.
Table of contents
OpenSSF Community Day Europe 2026 Schedule Is LiveNew eBook: Built to Last: Understanding the European Cyber Resilience Act (CRA)What Is a Dependency Firewall?Navigating The OpenSSF is as Easy as Floating Down A Lazy RiverThe CRA Readiness Reality: What Changed (and What Didn’t) Between 2025 and 2026?Representing OpenSSF at AfricaCyberFestWhat’s in the SOSS? An OpenSSF Podcast:News from OpenSSF Community Meetings and Projects:Member SpotlightsMeet OpenSSF at These Upcoming Events!128 Impressions