Any need for Cyber Resilience Act (CRA) support for commerical products?

[Kaliumhexacyanoferrat]

In 2026, there will be additional rules for companies selling software products in the EU due to the Cyber Resilience Act. Currently GenHTTP does not explicitely support this process, and we will only, if there is specific need for it. This could include:

• Documenting and comitting to a release plan (e.g. LTS)
• Adding a process for security issues (CVE etc.)
• Signing commits and nuget packages
• Adding reproducable, centralized builds
• Being more clear on dependencies being used (and their licenses)
• SBOM generation
• Optimizing the server for "secure by default"
• ...

If you are using GenHTTP within a commerical product or plan to do so, please reach out to us with your needs and requirements, so that we can support you with this issue.