Since the EU is bringing an act , that needs the products distributed to be flawless , and it applies to open source products too , if a single of their contributor / donor works for a corporate , what will be the future of FOSS in europe with this ?

you are viewing a single comment's thread
view the rest of the comments

[–] zaphod@feddit.de 26 points 1 year ago (3 children)

Without having read any part of this act I'd assume you having a job and you developing an open source app are two separate things unless your job involves developing that open source app.

[–] wagoner@infosec.pub 9 points 1 year ago (1 children)

The number of responses here saying they haven't read up on it but...

[–] zaphod@feddit.de 2 points 1 year ago

I read several different drafts I could find since writing that comment and although it's alll written somewhat vague in general, OP's point isn't in any draft I read.

[–] jungekatz@lib.lgbt 5 points 1 year ago (1 children)

Well if i am developing a product and I work for a corp or if my project is getting donation from a corp , it will be considered as a commerical project , it does not need me to be working on that product as part of my work !!

[–] zaphod@feddit.de 11 points 1 year ago (1 children)

No, those are separate. It's about open source projects that have developers working on it in their free time (not getting paid for it) and developers who get paid for it. You having a job as a software developer and working on a project outside your work time doesn't make it a "commercial activity".

[–] jungekatz@lib.lgbt 4 points 1 year ago

Just read the act then ! It keeps it vague enough to consider a person working in free time will be considered a commercial product

[–] jungekatz@lib.lgbt -2 points 1 year ago (1 children)

Please watch the video above !

[–] lowleveldata@programming.dev 20 points 1 year ago (1 children)

What's the gist? I hate video articles

[–] jungekatz@lib.lgbt 2 points 1 year ago

Basically A foss product is not exempted if an employee ( does not need to be a tech employee) contributes to a foss prod , or if a company donates to them ! So even npm packages by individual coders who are employed say.by dominos need to take audit and deliver vulnerability free code .