Skip to content
@orcwg

Open Regulatory Compliance Working Group (ORC WG)

README.md

Welcome to the ORC GitHub organization – ORC is an Eclipse Foundation Working Group whose immediate focus is to help open source maintainers and users meet the compliance requirements of the European Cyber Resilience Act (CRA).

The Cyber Resilience Act

The ORC WG main focus today is on supporting the open source community in developing assets that helps implement the CRA requirements. This has been translated into specific work streams as follows:

  • CRA FAQs - Either you are newbie to the CRA, or a pro already working on its implementation, the CRA FAQ is a space for the open source community to ask questions and clarify key CRA topics.
  • ORC Deliverables Plan - The ORC community has outlined key deliverables to work on in 2025.
  • Inventory - Inventory of resources relevant to the horizontal CRA standards, Open Source Steward obligations, and the security attestation program.
  • CRA Hub - Want an overview of our CRA-related work? This is the place to do it.

How to contribute

Events we are attending

Pinned Loading

  1. orcwg orcwg Public

    Home of the ORC WG

    26 7

  2. cra-hub cra-hub Public

    Everything you ever wanted to know about the CRA and its implementation

    138 36

Repositories

Showing 7 of 7 repositories
  • cra.orcwg.org Public

    CRA FAQ

    orcwg/cra.orcwg.org’s past year of commit activity
    JavaScript 0 Apache-2.0 3 17 (4 issues need help) 3 Updated Oct 29, 2025
  • cra-hub Public

    Everything you ever wanted to know about the CRA and its implementation

    orcwg/cra-hub’s past year of commit activity
    138 36 128 9 Updated Oct 29, 2025
  • cra-attestations Public

    This project aims to create a practical framework that helps manufacturers meet their due diligence obligations when using open source software, without adding burden to maintainers. By introducing voluntary security attestations, it seeks to strengthen FOSS security, sustainability, and collaboration with authorities and industry actors.

    orcwg/cra-attestations’s past year of commit activity
    6 MIT 2 0 1 Updated Oct 29, 2025
  • orcwg Public

    Home of the ORC WG

    orcwg/orcwg’s past year of commit activity
    26 7 20 7 Updated Oct 29, 2025
  • .github Public
    orcwg/.github’s past year of commit activity
    JavaScript 0 1 0 3 Updated Oct 28, 2025
  • vulnerability-management-spec Public
    orcwg/vulnerability-management-spec’s past year of commit activity
    3 2 20 3 Updated Sep 22, 2025
  • .eclipsefdn Public

    Repository to host configurations related to the Eclipse Foundation.

    orcwg/.eclipsefdn’s past year of commit activity
    Jsonnet 0 1 0 0 Updated Jun 10, 2025

Top languages

Loading…

Most used topics

Loading…