State of Open Con 2025

The EU’s Cyber Resilience Act creates a novel category of ‘open-source software stewards,’ creating a ‘light touch’ regime for designated entities. It has proven controversial, sparking debate about who may benefit – or not. Whilst the EU is yet to clarify what ‘stewardship’ shall entail, likely in 2025, there is little past practice as an internal governance principle within OSS.
Drawing upon key international law contexts where the ‘stewardship’ concept shapes governance regimes and informs stakeholders’ responsibilities, the presentation critically analyses potential implications of this approach for the future of OSS governance in the EU and beyond. For better or worse.