{"id":24496,"date":"2024-04-26T12:02:20","date_gmt":"2024-04-26T12:02:20","guid":{"rendered":"https:\/\/opensource.org\/?p=24496"},"modified":"2024-12-13T13:02:27","modified_gmt":"2024-12-13T13:02:27","slug":"openly-shared","status":"publish","type":"post","link":"https:\/\/opensource.org\/blog\/openly-shared","title":{"rendered":"Openly Shared: CRA’s Open goes beyond the OSD"},"content":{"rendered":"\n

The definition of \u201copen source\u201d in the most recent version<\/a> (article 2(48)) of the Cyber Resilience Act (CRA) goes beyond the Open Source Definition<\/a> (OSD) managed by OSI. It says:<\/p>\n\n\n\n

\n

\u201cFree and open-source software is understood as software the source code of which is openly shared<\/em> and the license of which provides for all rights to make it freely accessible, usable, modifiable and redistributable.\u201d<\/p>\n<\/blockquote>\n\n\n\n

The addition of \u201copenly shared\u201d was a considered and intentional addition by the co-legislators \u2013 they even checked with community members that it did not cause unintended effects before adding it. While Open Source communities all \u201copenly share\u201d the source code of their projects, the same is not true of some companies, especially those with \u201copen core\u201d business models.<\/p>\n\n\n\n

For historical reasons, it is not a requirement either of the OSD or of the FSF’s Free Software Definition<\/a> (FSD) and the most popular open source licenses do not require it. Notably, the GPL does not insist that source code be made public \u2013 only that those receiving the binaries must be able to request the corresponding source code and enjoy it however they wish (including making it public).<\/p>\n\n\n\n

For most Open Source projects and their uses, the CRA’s extra requirement will make no difference. But it complicates matters for companies that either restrict source availability to paying customers (such as Red Hat) or make little distinction between available and non-available source (such as ForgeRock) or withhold source to certain premium elements.<\/p>\n\n\n\n

A similar construct{1}<\/small><\/sup> is used in the AI Act<\/a> (recital 102) and I anticipate this trend will continue through other future legislation. Personally I welcome this additional impetus to openness.<\/p>\n\n\n\n

{1} The mention in the AI Act has a different character to that in the CRA. In the AI Act it is more narrative, restricted to a recital and is a subset of attributes of the license. In this form it actually refers to virtually no OSI-approved licenses. In the CRA the wording part of the formal definition in an Article, so much more impactful, and adds an additional requirement over the basic requirements of licensing.<\/em><\/small><\/p>\n

<\/div>","protected":false},"excerpt":{"rendered":"

The definition of \u201copen source\u201d in the most recent version (article 2(48)) of the Cyber Resilience Act (CRA) goes beyond the Open Source Definition (OSD) managed by OSI.<\/p>\n","protected":false},"author":14,"featured_media":24498,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_coblocks_attr":"","_coblocks_dimensions":"","_coblocks_responsive_height":"","_coblocks_accordion_ie_support":"","_crdt_document":"","publish_to_discourse":"1","publish_post_category":"6","wpdc_auto_publish_overridden":"","wpdc_topic_tags":"","wpdc_pin_topic":"","wpdc_pin_until":"","discourse_post_id":"625","discourse_permalink":"https:\/\/discuss.opensource.org\/t\/openly-shared\/317","wpdc_publishing_response":"success","wpdc_publishing_error":"","mf2_syndication":[],"episode_type":"","audio_file":"","podmotor_file_id":"","podmotor_episode_id":"","cover_image":"","cover_image_id":"","duration":"","filesize":"","filesize_raw":"","date_recorded":"","explicit":"","block":"","itunes_episode_number":"","itunes_title":"","itunes_season_number":"","itunes_episode_type":"","example_meta_block_field":"","webmentions_disabled_pings":false,"webmentions_disabled":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[7],"tags":[226,238,243,271],"class_list":["post-24496","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-cra","tag-europe","tag-legal","tag-policy"],"mb":[],"acf":[],"nelio_content":{"autoShareEndMode":"never","automationSources":{"useCustomSentences":false,"customSentences":[]},"efiAlt":"","efiUrl":"","followers":[28,14],"highlights":[],"isAutoShareEnabled":true,"networkImageIds":[],"permalinkQueryArgs":[],"series":[],"suggestedReferences":[]},"yoast_head":"\nOpenly Shared: CRA's Open goes beyond the OSD - Open Source Initiative<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/opensource.org\/blog\/openly-shared\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Openly Shared: CRA's Open goes beyond the OSD - Open Source Initiative\" \/>\n<meta property=\"og:description\" content=\"The definition of \u201copen source\u201d in the most recent version (article 2(48)) of the Cyber Resilience Act (CRA) goes beyond the Open Source Definition (OSD) managed by OSI.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/opensource.org\/blog\/openly-shared\" \/>\n<meta property=\"og:site_name\" content=\"Open Source Initiative\" \/>\n<meta property=\"article:published_time\" content=\"2024-04-26T12:02:20+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-12-13T13:02:27+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i0.wp.com\/opensource.org\/wp-content\/uploads\/2024\/04\/artem-beliaikin-Np7V88Hd8Es-unsplash-scaled.jpg?fit=2560%2C1707&quality=89&ssl=1\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1707\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Simon Phipps\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Simon Phipps\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/opensource.org\\\/blog\\\/openly-shared#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/opensource.org\\\/blog\\\/openly-shared\"},\"author\":{\"name\":\"Simon Phipps\",\"@id\":\"https:\\\/\\\/opensource.org\\\/#\\\/schema\\\/person\\\/19991a7a4606d8c450c125b584c1c626\"},\"headline\":\"Openly Shared: CRA’s Open goes beyond the OSD\",\"datePublished\":\"2024-04-26T12:02:20+00:00\",\"dateModified\":\"2024-12-13T13:02:27+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/opensource.org\\\/blog\\\/openly-shared\"},\"wordCount\":357,\"commentCount\":16,\"publisher\":{\"@id\":\"https:\\\/\\\/opensource.org\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/opensource.org\\\/blog\\\/openly-shared#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/opensource.org\\\/wp-content\\\/uploads\\\/2024\\\/04\\\/artem-beliaikin-Np7V88Hd8Es-unsplash-scaled.jpg?fit=2560%2C1707&quality=89&ssl=1\",\"keywords\":[\"cra\",\"europe\",\"legal\",\"policy\"],\"articleSection\":[\"News\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/opensource.org\\\/blog\\\/openly-shared#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/opensource.org\\\/blog\\\/openly-shared\",\"url\":\"https:\\\/\\\/opensource.org\\\/blog\\\/openly-shared\",\"name\":\"Openly Shared: CRA's Open goes beyond the OSD - Open Source Initiative\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/opensource.org\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/opensource.org\\\/blog\\\/openly-shared#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/opensource.org\\\/blog\\\/openly-shared#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/opensource.org\\\/wp-content\\\/uploads\\\/2024\\\/04\\\/artem-beliaikin-Np7V88Hd8Es-unsplash-scaled.jpg?fit=2560%2C1707&quality=89&ssl=1\",\"datePublished\":\"2024-04-26T12:02:20+00:00\",\"dateModified\":\"2024-12-13T13:02:27+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/opensource.org\\\/blog\\\/openly-shared#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/opensource.org\\\/blog\\\/openly-shared\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/opensource.org\\\/blog\\\/openly-shared#primaryimage\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/opensource.org\\\/wp-content\\\/uploads\\\/2024\\\/04\\\/artem-beliaikin-Np7V88Hd8Es-unsplash-scaled.jpg?fit=2560%2C1707&quality=89&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/opensource.org\\\/wp-content\\\/uploads\\\/2024\\\/04\\\/artem-beliaikin-Np7V88Hd8Es-unsplash-scaled.jpg?fit=2560%2C1707&quality=89&ssl=1\",\"width\":2560,\"height\":1707,\"caption\":\"Photo credits: Artem Beliaikin\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/opensource.org\\\/blog\\\/openly-shared#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/opensource.org\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Openly Shared: CRA’s Open goes beyond the OSD\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/opensource.org\\\/#website\",\"url\":\"https:\\\/\\\/opensource.org\\\/\",\"name\":\"Open Source Initiative\",\"description\":\"The steward of the Open Source Definition, setting the foundation for the Open Source Software ecosystem.\",\"publisher\":{\"@id\":\"https:\\\/\\\/opensource.org\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/opensource.org\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/opensource.org\\\/#organization\",\"name\":\"Open Source Initiative\",\"url\":\"https:\\\/\\\/opensource.org\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/opensource.org\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/opensource.org\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/cropped-OSI-horizontal-large.png?fit=1388%2C496&quality=80&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/opensource.org\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/cropped-OSI-horizontal-large.png?fit=1388%2C496&quality=80&ssl=1\",\"width\":1388,\"height\":496,\"caption\":\"Open Source Initiative\"},\"image\":{\"@id\":\"https:\\\/\\\/opensource.org\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/opensource.org\\\/#\\\/schema\\\/person\\\/19991a7a4606d8c450c125b584c1c626\",\"name\":\"Simon Phipps\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/863eab1479388f6126d272001cbf14a265f38b7fe100ed66f55b6c3937a1745c?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/863eab1479388f6126d272001cbf14a265f38b7fe100ed66f55b6c3937a1745c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/863eab1479388f6126d272001cbf14a265f38b7fe100ed66f55b6c3937a1745c?s=96&d=mm&r=g\",\"caption\":\"Simon Phipps\"},\"url\":\"https:\\\/\\\/opensource.org\\\/blog\\\/author\\\/webmink\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Openly Shared: CRA's Open goes beyond the OSD - Open Source Initiative","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/opensource.org\/blog\/openly-shared","og_locale":"en_US","og_type":"article","og_title":"Openly Shared: CRA's Open goes beyond the OSD - Open Source Initiative","og_description":"The definition of \u201copen source\u201d in the most recent version (article 2(48)) of the Cyber Resilience Act (CRA) goes beyond the Open Source Definition (OSD) managed by OSI.","og_url":"https:\/\/opensource.org\/blog\/openly-shared","og_site_name":"Open Source Initiative","article_published_time":"2024-04-26T12:02:20+00:00","article_modified_time":"2024-12-13T13:02:27+00:00","og_image":[{"width":2560,"height":1707,"url":"https:\/\/i0.wp.com\/opensource.org\/wp-content\/uploads\/2024\/04\/artem-beliaikin-Np7V88Hd8Es-unsplash-scaled.jpg?fit=2560%2C1707&quality=89&ssl=1","type":"image\/jpeg"}],"author":"Simon Phipps","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Simon Phipps","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/opensource.org\/blog\/openly-shared#article","isPartOf":{"@id":"https:\/\/opensource.org\/blog\/openly-shared"},"author":{"name":"Simon Phipps","@id":"https:\/\/opensource.org\/#\/schema\/person\/19991a7a4606d8c450c125b584c1c626"},"headline":"Openly Shared: CRA’s Open goes beyond the OSD","datePublished":"2024-04-26T12:02:20+00:00","dateModified":"2024-12-13T13:02:27+00:00","mainEntityOfPage":{"@id":"https:\/\/opensource.org\/blog\/openly-shared"},"wordCount":357,"commentCount":16,"publisher":{"@id":"https:\/\/opensource.org\/#organization"},"image":{"@id":"https:\/\/opensource.org\/blog\/openly-shared#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/opensource.org\/wp-content\/uploads\/2024\/04\/artem-beliaikin-Np7V88Hd8Es-unsplash-scaled.jpg?fit=2560%2C1707&quality=89&ssl=1","keywords":["cra","europe","legal","policy"],"articleSection":["News"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/opensource.org\/blog\/openly-shared#respond"]}]},{"@type":"WebPage","@id":"https:\/\/opensource.org\/blog\/openly-shared","url":"https:\/\/opensource.org\/blog\/openly-shared","name":"Openly Shared: CRA's Open goes beyond the OSD - Open Source Initiative","isPartOf":{"@id":"https:\/\/opensource.org\/#website"},"primaryImageOfPage":{"@id":"https:\/\/opensource.org\/blog\/openly-shared#primaryimage"},"image":{"@id":"https:\/\/opensource.org\/blog\/openly-shared#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/opensource.org\/wp-content\/uploads\/2024\/04\/artem-beliaikin-Np7V88Hd8Es-unsplash-scaled.jpg?fit=2560%2C1707&quality=89&ssl=1","datePublished":"2024-04-26T12:02:20+00:00","dateModified":"2024-12-13T13:02:27+00:00","breadcrumb":{"@id":"https:\/\/opensource.org\/blog\/openly-shared#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/opensource.org\/blog\/openly-shared"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/opensource.org\/blog\/openly-shared#primaryimage","url":"https:\/\/i0.wp.com\/opensource.org\/wp-content\/uploads\/2024\/04\/artem-beliaikin-Np7V88Hd8Es-unsplash-scaled.jpg?fit=2560%2C1707&quality=89&ssl=1","contentUrl":"https:\/\/i0.wp.com\/opensource.org\/wp-content\/uploads\/2024\/04\/artem-beliaikin-Np7V88Hd8Es-unsplash-scaled.jpg?fit=2560%2C1707&quality=89&ssl=1","width":2560,"height":1707,"caption":"Photo credits: Artem Beliaikin"},{"@type":"BreadcrumbList","@id":"https:\/\/opensource.org\/blog\/openly-shared#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/opensource.org\/"},{"@type":"ListItem","position":2,"name":"Openly Shared: CRA’s Open goes beyond the OSD"}]},{"@type":"WebSite","@id":"https:\/\/opensource.org\/#website","url":"https:\/\/opensource.org\/","name":"Open Source Initiative","description":"The steward of the Open Source Definition, setting the foundation for the Open Source Software ecosystem.","publisher":{"@id":"https:\/\/opensource.org\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/opensource.org\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/opensource.org\/#organization","name":"Open Source Initiative","url":"https:\/\/opensource.org\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/opensource.org\/#\/schema\/logo\/image\/","url":"https:\/\/i0.wp.com\/opensource.org\/wp-content\/uploads\/2023\/03\/cropped-OSI-horizontal-large.png?fit=1388%2C496&quality=80&ssl=1","contentUrl":"https:\/\/i0.wp.com\/opensource.org\/wp-content\/uploads\/2023\/03\/cropped-OSI-horizontal-large.png?fit=1388%2C496&quality=80&ssl=1","width":1388,"height":496,"caption":"Open Source Initiative"},"image":{"@id":"https:\/\/opensource.org\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/opensource.org\/#\/schema\/person\/19991a7a4606d8c450c125b584c1c626","name":"Simon Phipps","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/863eab1479388f6126d272001cbf14a265f38b7fe100ed66f55b6c3937a1745c?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/863eab1479388f6126d272001cbf14a265f38b7fe100ed66f55b6c3937a1745c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/863eab1479388f6126d272001cbf14a265f38b7fe100ed66f55b6c3937a1745c?s=96&d=mm&r=g","caption":"Simon Phipps"},"url":"https:\/\/opensource.org\/blog\/author\/webmink"}]}},"jetpack_featured_media_url":"https:\/\/i0.wp.com\/opensource.org\/wp-content\/uploads\/2024\/04\/artem-beliaikin-Np7V88Hd8Es-unsplash-scaled.jpg?fit=2560%2C1707&quality=89&ssl=1","jetpack_sharing_enabled":true,"mfb_rest_fields":["title","nelio_content","yoast_head","yoast_head_json","jetpack_featured_media_url","jetpack_sharing_enabled"],"_links":{"self":[{"href":"https:\/\/opensource.org\/wp-json\/wp\/v2\/posts\/24496","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/opensource.org\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/opensource.org\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/opensource.org\/wp-json\/wp\/v2\/users\/14"}],"replies":[{"embeddable":true,"href":"https:\/\/opensource.org\/wp-json\/wp\/v2\/comments?post=24496"}],"version-history":[{"count":6,"href":"https:\/\/opensource.org\/wp-json\/wp\/v2\/posts\/24496\/revisions"}],"predecessor-version":[{"id":24852,"href":"https:\/\/opensource.org\/wp-json\/wp\/v2\/posts\/24496\/revisions\/24852"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/opensource.org\/wp-json\/wp\/v2\/media\/24498"}],"wp:attachment":[{"href":"https:\/\/opensource.org\/wp-json\/wp\/v2\/media?parent=24496"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/opensource.org\/wp-json\/wp\/v2\/categories?post=24496"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/opensource.org\/wp-json\/wp\/v2\/tags?post=24496"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}