Open Source Community Unites to Build EU CRA-Compliant Cybersecurity Processes

Re:Open Source Community Unites to Build EU CRA-Compliant Cy... by gwervc on Tuesday April 23, 2024 @05:58AM (#40130221)

> I would characterise "Apache Software Foundation, Blender Foundation, OpenSSL Software Foundation, PHP Foundation, Python Software Foundation, Rust Foundation, and Eclipse Foundation" as BigFOSS

While names cited are associated to long-standing well-recognized projects, it strikes me at odd to include Rust Foundation here. Not only the language itself is still relatively new and used in few real life projects, but the foundation is very new (2021).

Moreover, looking at its last annual report, it spent half of it's budget (1.5M$) on "membership & admin". It seems like the true action of this foundation is to beg money from big corps and give it to a few selected members.

[ Parent | on HN ]

Re:Open Source Community Unites to Build EU CRA-Compliant Cy... by martijnarts on Tuesday April 23, 2024 @06:26AM (#40130319)

Here's[0] a breakdown from the foundation on that budget category. They also commit to breaking it down better in the future:

  Salaries, benefits, payroll taxes, payroll service provider fees: $1.17m  
  Travel, event sponsorship, & support: $192k  
  Legal and Professional Fees: $66k
  Fund transfer to the Grants Program from membership fees: $40k
  Fund transfer to the Specification work from membership fees: $20k
  Marketing: $36k
  General Admin: (software, bank fees, meeting rooms, etc.) $20k

It's mostly salaries. They employ four engineers (software, security, infrastructure) that work on Rust, who they pay "at or above the average in their local market."

[0]: https://rust-lang.zulipchat.com/#narrow/stream/335408-founda...

[ Parent | on HN ]