Debian statement on the Cyber Resilience Act

The Debian project has completed a
general-resolution vote, adopting a statement expressing concern about
the Cyber Resilience Act (CRA) pending in the European Union.

Even if only 'commercial activities' are in the scope of CRA, the
Free Software community - and as a consequence, everybody - will
lose a lot of small projects. CRA will force many small enterprises
and most probably all self employed developers out of business
because they simply cannot fulfill the requirements imposed by
CRA. Debian and other Linux distributions depend on their work. If
accepted as it is, CRA will undermine not only an established
community but also a thriving market. CRA needs an exemption for
small businesses and, at the very least, solo-entrepreneurs