Eclipse Foundation Launches ORC Learning Hub to Prep Open Source Community for EU Cyber Resilience Act
Event summary
- Eclipse Foundation and ORC Working Group launched the ORC Learning Hub on June 30, 2026 to help open source developers comply with the EU Cyber Resilience Act (CRA).
- The free global education initiative offers role-specific training for developers, maintainers, security teams, and legal professionals.
- First two modules of the program are available now, with additional modules on SBOMs, due diligence, and vulnerability management to be released soon.
- CRA obligations take effect in September 2026, creating urgency for global software organizations to prepare.
The big picture
The launch of the ORC Learning Hub underscores the growing intersection between open source software and regulatory compliance. With over 96% of commercial codebases containing open source, the CRA's impact extends far beyond the EU, affecting global software supply chains. This initiative represents a strategic response to the urgent need for clear guidance on navigating new cybersecurity requirements in open source development.
What we're watching
- Regulatory Compliance
- How the ORC Learning Hub will affect adoption rates of CRA-compliant practices among open source developers and organizations.
- Market Impact
- Whether the global reach of the CRA will drive standardization in software security practices beyond EU borders.
- Execution Risk
- The pace at which organizations can operationalize CRA readiness before the September 2026 deadline.
Related topics