OSS + ELC EU 2026

The EU Cyber Resilience Act requires manufacturers to exercise due diligence when integrating open source components — but what does that actually look like in practice? ORBIT Launchpad is an OpenSSF initiative building the catalogs, criteria, and tooling that help manufacturers demonstrate they've done the work.

This talk covers how ORBIT Launchpad bridges the gap between regulatory intent and operational reality. We'll share how the CRAB-FOSC and CRAB-FOMA catalogs translate CRA obligations into actionable criteria that manufacturers can evaluate against, how we're aligning with complementary efforts across foundations to avoid duplication, and what the open source ecosystem needs to provide so that due diligence doesn't become an unfunded mandate on maintainers.

Attendees will leave with a practical understanding of: what due diligence means for manufacturers consuming open source under the CRA; how ORBIT Launchpad's open catalogs and tooling reduce that burden; and how standards bodies and open source communities can work together to make compliance achievable.