The EU Cyber Resilience Act (CRA) is reshaping the landscape for open source software. Whether you’re a maintainer, contributor, or vendor, the CRA introduces new expectations—and new responsibilities.| openssf.org