<div dir="auto">Even,</div><div dir="auto"><br></div><div dir="auto">I think we will need to let this rest for a bit. As I understand it each bullet point on this topic has been shared; and they wrote some clarifications elsewhere about what they intended. </div><div dir="auto"><br></div><div dir="auto">I now saw a photo online and those two quotes are actually all there is to work with. </div><div dir="auto"><span style="background-color:rgba(0,0,0,0);border-color:rgb(0,0,0);color:rgb(0,0,0)"><br></span></div><div dir="auto"><span style="background-color:rgba(0,0,0,0);border-color:rgb(0,0,0);color:rgb(0,0,0)">> the provision of free and open-source software products with digital elements that are not monetised by their manufacturers is not considered a commercial activity</span></div><div dir="auto"><br></div><div dir="auto">The first bullet point appears to acknowledge that going after organizations like osgeo with no income is not going to be effective. </div><div dir="auto"><br></div><div dir="auto">However it opens the door to abuse, using open source to disrupt - commoditize a market that supports a competitor for example. </div><div dir="auto"><span style="background-color:rgba(0,0,0,0);border-color:rgb(0,0,0);color:rgb(0,0,0)"><br></span></div><div dir="auto"><span style="background-color:rgba(0,0,0,0);border-color:rgb(0,0,0);color:rgb(0,0,0)">> The mere circumstances under which the product has been developed, or how the development has been financed should therefore not be taken into account when determining the commercial or non-commercial nature of</span></div><div dir="auto"><span style="background-color:rgba(0,0,0,0);border-color:rgb(0,0,0);color:rgb(0,0,0)"><br></span></div><div dir="auto"><span style="background-color:rgba(0,0,0,0);border-color:rgb(0,0,0);color:rgb(0,0,0)">This seems to be a response to the tension between closed source being developed in private and open source being developed in public. Think focusing on releases rather than a public repository or release candidates. </span></div><div dir="auto"><br clear="all"><div dir="auto"><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div>--</div><div>Jody Garnett</div></div></div></div></div></div></div><div><br></div><div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Dec 6, 2023 at 9:49 AM Even Rouault <<a href="mailto:even.rouault@spatialys.com">even.rouault@spatialys.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;padding-left:1ex;border-left-color:rgb(204,204,204)"><u></u>
<div>
<p>Hi Jody,</p>
<p>thanks for the update.</p>
<p>The clarification of point 3 is still fuzzy to me. What do they
actually mean by "monetised by manufacturers". Is monetizing only
when the software is open source but people have to pay to use it
on SaaS or similar models ? Otherwise if it is about money being
involved in the making of the open source software, then that
contradicts the second point that how the development was financed
shouldn't be taken into account to determine commercial
activity... Is consulting about open source software "monetizing"
it ... ?</p>
<p>Even<br>
</p></div><div>
<div>Le 06/12/2023 à 16:09, Jody Garnett via
Discuss a écrit :<br>
</div>
</div><div><blockquote type="cite"></blockquote></div><div><blockquote type="cite">
<div dir="auto">
<div dir="auto">Follow up to November discussion and <a href="https://www.osgeo.org/foundation-news/eu-cyber-resilience-act/" target="_blank">blog post</a> asking OSGeo community
to be informed.</div>
<div dir="auto"><br>
</div>
<div dir="auto">
<ol style="margin:0px" start="1">
<li>At the end November Europe lawmakers agreed on
something: <a href="https://www.consilium.europa.eu/en/press/press-releases/2023/11/30/cyber-resilience-act-council-and-parliament-strike-a-deal-on-security-requirements-for-digital-products/" target="_blank">https://www.consilium.europa.eu/en/press/press-releases/2023/11/30/cyber-resilience-act-council-and-parliament-strike-a-deal-on-security-requirements-for-digital-products/</a> <br>
<br>
Free and open source was so far down the priority list
that the press release does not even mention it.</li>
</ol>
</div>
<div dir="auto"><br>
</div>
<div dir="auto">
<ol style="margin:0px" start="2">
<li>Next there were assurances that free and open-source
community concerns were addressed: <a href="https://www.europarl.europa.eu/news/en/press-room/20231106IPR09007/cyber-resilience-act-agreement-with-council-to-boost-digital-products-security" target="_blank">https://www.europarl.europa.eu/news/en/press-room/20231106IPR09007/cyber-resilience-act-agreement-with-council-to-boost-digital-products-security</a> <br>
<br>
The quote did indicate how our concerns were addressed:<br>
<br>
> We have ensured support for micro and small
enterprises and better involvement of stakeholders, and
addressed the concerns of the open-source community, while
keeping an ambitious European dimension.</li>
</ol>
</div>
<div dir="auto"><br>
</div>
<div dir="auto">
<ol style="margin:0px" start="3">
<li>This week I can find a articles providing clarifications
that have been added: <a href="https://openforumeurope.org/eu-cyber-resilience-act-takes-a-leap-forward/" target="_blank">https://openforumeurope.org/eu-cyber-resilience-act-takes-a-leap-forward/</a> <br>
<br>
Two clarifications:<br>
<br>
> the provision of free and open-source software
products with digital elements that are not monetised by
their manufacturers is not considered a commercial
activity<br>
<br>
> The mere circumstances under which the product has
been developed, or how the development has been financed
should therefore not be taken into account when
determining the commercial or non-commercial nature of
[making free and open-source software available on the
market].</li>
</ol>
</div>
<div dir="auto"><br>
</div>
<div dir="ltr">—</div>
<div dir="auto">Jody</div>
</div>
<div style="background-color:rgba(0,0,0,0);border-color:rgb(255,255,255);color:rgb(255,255,255)" dir="auto">
</div>
<br>
<fieldset></fieldset>
</blockquote></div><div><blockquote type="cite"><pre style="font-family:monospace">_______________________________________________
Discuss mailing list
<a href="mailto:Discuss@lists.osgeo.org" target="_blank" style="font-family:monospace">Discuss@lists.osgeo.org</a>
<a href="https://lists.osgeo.org/mailman/listinfo/discuss" target="_blank" style="font-family:monospace">https://lists.osgeo.org/mailman/listinfo/discuss</a>
</pre></blockquote></div><div><blockquote type="cite">
</blockquote>
<pre cols="72" style="font-family:monospace">--
<a href="http://www.spatialys.com" target="_blank" style="font-family:monospace">http://www.spatialys.com</a>
My software is free, but my time generally not.</pre>
</div>
</blockquote></div></div>