The fact that Python is listed as non-critical suggests that the EU is clueless about how software dependencies work.
Just EU doing EU things. Let it be known that no one can put more red tape than no-name EU bureaucrats.
I'm sure this will drive innovation /s
https://www.linuxfoundation.org/blog/understanding-the-cyber-resilience-act
Discussion
In this context this is actually a good thing.
Tbf this is all pretty crazy and clueless.
Is any open source OS critical and needs this level of bureaucracy? Will they track down TempleOS maintainers and make them fill out forms?
bureaucrats r always clueless in most such stuff in any country