The Eclipse Foundation’s head of security updated members on the EU Cyber Resilience Act and the foundation’s participation in Anthropic’s Project Glasswing: reporting obligations for commercial manufacturers took effect September 11, 2026 and apply to commercial products built on Eclipse open-source technology, while the European Commission’s September 4 FAQ clarified that open-source software stewards such as Eclipse face a later timeline, with steward reporting starting December 11, 2027. The post separates the two roles so members do not conflate vendor compliance duties with the foundation’s stewardship.
Eclipse Foundation updates members on CRA reporting deadlines
The Eclipse Foundation's head of security updated members on the EU Cyber Resilience Act and the foundation's participation in Anthropic's Project Glasswing: reporting obligations for commercial manufacturers took effect September 11, 2026 and apply to commercial products built on Eclipse open-source technology, while the European Commission's September 4 FAQ clarified that open-source software stewards such as Eclipse face a later timeline, with steward reporting starting December 11, 2027. The post separates the two roles so members do not conflate vendor compliance duties with the foundation's stewardship.
Source: Eclipse