Security · Flashcard
A maintainer publishes an open-source library and does not monetise it. How does the CRA treat that?
Why this is the answer
Supplying free and open-source software that its manufacturers do not monetise is explicitly not considered a commercial activity, so publishing a library does not turn a maintainer into a CRA manufacturer. Downstream adoption by companies does not change that — the obligations follow whoever places the commercial product on the market — and maintainer location is not part of the test.
Read more in the docs