[chasil]

OSS developers could simply include a disclaimer along with their chosen license:

"The developer of this software attests that it does not and will not comply with the EU CRA, and may not be used as critical infrastructure within the European Union. Any entity incorporating this software in products sold in the European Union agrees to perform all required compliance, and hold the developer harmless. Any compliance failure shall terminate all licensing of this software to all involved parties."

What that does to [vendors in] the EU would be interesting to see.

[throwaway294566]

For developers outside the EU, this is automatically how it works. Only somebody selling or importing in the EU needs to worry about CE compliance.

The big problem imho is for EU-resident OSS developers.