Debian statement on the Cyber Resilience Act

The Debian project has completed ageneral-resolution vote, adopting a statement expressing concern aboutthe Cyber Resilience Act (CRA) pending in the European Union.

Even if only "commercial activities" are in the scope of CRA, theFree Software community - and as a consequence, everybody - willlose a lot of small projects. CRA will force many small enterprisesand most probably all self employed developers out of businessbecause they simply cannot fulfill the requirements imposed byCRA. Debian and other Linux distributions depend on their work. Ifaccepted as it is, CRA will undermine not only an establishedcommunity but also a thriving market. CRA needs an exemption forsmall businesses and, at the very least, solo-entrepreneurs