The European Cyber Resilience Act

So I looked through all the amended texts by the Council and the Parliament and am impressed by the breadth and scope of some of the changes. It's also interesting to see the different focus: the Council has more amendments that attempt some refactoring, and spends more time on the powers of the Commission. While the Parliament focussed on many of the smaller (though important details), and worked on the impacts on SMEs and how the money is spent. The Expert Group proposed by the Parliament is an interesting touch. I'm not sure if there is precedent for this kind of new committee, but it seems reasonable. The Council added the ability for collective actions which is something I hadn't thought of.

There doesn't seem to be much disagreement between the two texts, but it's going to take a lot of word-smithing to get this down to a single document. Both the Council and the Parliament drastically changed the paragraphs relating to free-software in largely compatible ways, but someone needs to work them down do a single version both agree with.