The Eclipse Foundation and the ORC Working Group have launched a free global learning platform to help open source developers, maintainers and software teams prepare for the EU Cyber Resilience Act ahead of its September 2026 deadline.
The Eclipse Foundation, in collaboration with the Open Regulatory Compliance (ORC) Working Group, has launched the ORC Learning Hub, a free global education initiative designed to help the open source ecosystem prepare for the European Union’s Cyber Resilience Act (CRA). The platform delivers role-specific training for open source developers, maintainers, contributors, project stewards, product teams, security and compliance professionals, OSPO leaders and legal teams.
The initiative comes as organisations worldwide face a narrowing window to comply before the first CRA obligations take effect in September 2026. While the regulation applies to products sold in the EU, its impact extends globally because more than 96% of commercial codebases contain open source software, according to the OpenLogic 2026 State of Open Source Report.
The Learning Hub offers free practical guidance on CRA requirements, including secure development practices, vulnerability management, software bills of materials (SBOMs), due diligence and regulatory responsibilities for manufacturers, distributors and open source software stewards. Modules covering CRA fundamentals for open source software and manufacturers are available immediately, with additional courses to follow.
“The CRA changes the rules for how software is developed and delivered globally,” said Mike Milinkovich, Executive Director of the Eclipse Foundation. “Because open source is part of almost every modern application and system, CRA readiness has to happen where software is actually built. The ORC Learning Hub helps developers, maintainers, project stewards, and software teams understand what the CRA requires and put that knowledge into practice.”
