E

Eclipse Foundation

Open source collaboration platform for projects

Front-End Web Developer

Full-Time
CA$65k - CA$85k
Junior
Bachelor's
Remote in Germany+5 moreMore locations: Remote in Belgium | Remote in Spain | Remote in Italy | Remote in France | Ottawa, ON, Canada
RemotePreference for candidates based in Canada (Ottawa), France, Germany, Italy, Spain, Portugal, or Belgium.
Software EngineeringFrontend Engineering

About the job

Requirements
  • At least two years of professional web development experience.
  • Strong knowledge of HTML, CSS, JavaScript, and modern front-end development practices.
  • Experience developing applications with React.
  • Experience with TypeScript.
  • Experience designing and developing reusable UI components.
  • Experience integrating applications with REST APIs.
  • Experience writing automated tests and testable front-end code.
  • Understanding of responsive web design and modern browser standards.
  • Understanding of web accessibility principles and practices.
  • Familiarity with Git and collaborative development workflows using platforms such as GitHub or GitLab.
  • Ability to troubleshoot front-end issues using browser development tools.
  • Ability to write clear technical documentation.
  • Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent professional experience.
  • Ability to manage multiple concurrent requests, prioritise effectively, communicate trade-offs, and adjust priorities as needs change.
  • Ability to work independently within a geographically distributed team.
  • Strong written and verbal communication skills.
  • Ability to collaborate effectively with technical and non-technical colleagues.
  • Attention to detail and a focus on maintainable, high-quality solutions.
  • Ability and willingness to learn new technologies and development practices.
  • Ability to balance technical quality with practical project requirements.
Responsibilities
  • Design, develop, and maintain reusable front-end components and libraries used across Eclipse Foundation websites and applications.
  • Contribute to the evolution and maintenance of the front-end design system and component library.
  • Develop responsive, accessible, and standards-compliant user interfaces.
  • Build and maintain front-end applications and reusable components that integrate with REST APIs and work across different web platforms and frameworks.
  • Write clean, maintainable, and testable JavaScript and TypeScript code.
  • Develop and maintain automated tests for front-end components and applications.
  • Document components, development patterns, APIs, and technical decisions.
  • Review code and contribute to shared development standards and best practices.
  • Collaborate with designers, developers, and internal stakeholders to understand requirements and develop appropriate solutions.
  • Work with stakeholders and other developers to prioritise requests, clarify requirements, and balance competing needs.
  • Diagnose and resolve front-end defects, performance issues, and browser compatibility problems.
  • Improve web accessibility, performance, search engine optimisation, and overall user experience.
  • Contribute improvements and fixes to open source projects used by the Eclipse Foundation when appropriate.
  • Evaluate new technologies and recommend their adoption when they provide clear benefits.
Desired Qualifications
  • Experience with component development and documentation tools such as Storybook.
  • Experience developing or maintaining a design system or shared component library.
  • Experience with Web Components and libraries such as Lit or Stencil.
  • Experience with Bootstrap.
  • Experience with Sass or other CSS preprocessing tools.
  • Experience with static site generators such as Hugo.
  • Familiarity with PHP and experience working with content management systems such as Drupal or WordPress.
  • Knowledge of search engine optimisation.
  • Experience with modern front-end build tools and the Node.js/npm ecosystem.
  • Experience with continuous integration and automated deployment workflows.
  • Experience with visual regression, end-to-end, or accessibility testing.
  • Familiarity with Java and Java-based backend applications.
  • Familiarity with relational databases.
  • Experience contributing to open source projects.

About the company

E

Eclipse Foundation

View
Website

The Eclipse Foundation coordinates a global community to develop and maintain open source software, hosting projects like the Eclipse IDE, Jakarta EE, Eclipse Software Defined Vehicle, and over 425 others. It provides governance, collaboration tools, project hosting, and ecosystem support, while members contribute code and governance and the Foundation handles legal, financial, and release management tasks. It stands out by offering a large, mature portfolio across many industries under formal governance and business-friendly policies, unlike single-project foundations or for-profit ecosystems. Its goal is to enable sustainable open source collaboration and innovation by coordinating communities and projects worldwide to deliver interoperable software and help members meet their business objectives.

Company Size

201-500

Company Stage

N/A

Total Funding

N/A

Headquarters

Ottawa, Canada

Founded

2001

Get referred to Eclipse Foundation

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • September 2026 OCCTET toolkit targets SMEs facing immediate CRA reporting deadlines.
  • July 2026 OWASP partnership broadens Eclipse's security reach across maintainers and manufacturers.
  • 2026 Annual Report shows €19.9 million revenue budget and growing commercialization around Open VSX.

What critics are saying

  • Open VSX security failures would damage trust and threaten Eclipse's infrastructure business quickly.
  • CRA obligations on 11 September 2026 and 11 December 2027 create execution risk.
  • Eclipse depends on grants, memberships, and working groups; funding concentration raises downside exposure.

What makes Eclipse Foundation unique

  • Brussels-based, vendor-neutral governance spans 304 members and 450-plus projects in September 2026.
  • Open VSX Managed Registry makes Eclipse infrastructure for AI IDEs, with AWS, Google, Cursor.
  • OCCTET and ORC turn EU Cyber Resilience Act compliance into concrete open-source tooling.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Flexible Work Hours
  • Remote Work Options

Company News

Eclipse
Oct 15th, 2026
A world first: the Structured Glossary of Embedded AI is now available in English.

A world first: the Structured Glossary of Embedded AI is now available in English. Thursday, October 15, 2026 - 07:00 by Natalia Loungou Paris, 15 October 2026. Embedded France and six partner organisations - the Eclipse Foundation, CEA, Leminnov, Quantyss, the European Trustworthy AI Association and Lianeo - today release the English edition of the Structured Glossary of Embedded AI. Produced by Embedded France's Embedded AI Working Group, led by Eliane Fourgeau, CEO of Quantyss, and first published in French in January 2026, the glossary is now available in both languages. It can be read online or downloaded as a PDF, under a Creative Commons licence, from a platform hosted by the Eclipse Foundation. The need for a shared vocabulary. Artificial intelligence is now everywhere, in vehicles, trains and aircraft, in medicine, in industrial equipment, in energy grids, to name only the most familiar. But unlike non-embedded AI, embedded AI operates under strict physical constraints: limited memory, latency constraints, demonstrable safety. These constraints sit at the crossroads of multiple disciplines, blending the expertise of data and AI scientists, software engineers, hardware designers, systems architects, cybersecurity, safety and compliance specialists. Every profession has its own jargon, habits and routines, and when people do not speak the same language, the risk of misunderstanding is high. These gaps are not a matter of style. They cost real money: ambiguous specifications, misread requirements, validation campaigns that have to be run again, certification files that keep growing. In an embedded system, a misunderstood word can turn into a flawed architectural decision, and such decisions are not easily undone. Something had to be done, and quickly, to help these worlds understand one another. That is exactly what Embedded France's Embedded AI Working Group set out to do. A structured reference of more than 300 definitions. When the working group was set up in 2024, its starting point was simple: no real collaboration is possible unless everyone can describe each task and each situation precisely, in terms that every stakeholder understands. Nearly a year of work produced a first French-language glossary, presented in January 2026 at the 18th Assises de l'Embarqué. Today the group is unveiling a bilingual edition. It brings together more than 300 definitions organised in 13 chapters that follow the life cycle of a system: data and acquisition, models and their optimisation, software and tooling, architecture and hardware, emerging paradigms, testing, validation and certification, trustworthy AI, governance and life cycle, regulation and standards, and sector applications. Each term sits within its chapter and is linked to related notions, so readers find not only a definition but where it fits within a system. It is a genuine working guide. The glossary covers the frameworks industry now has to reconcile, from the ISO and DO standards that apply to critical systems through to the AI Act and the Cyber Resilience Act, and includes the field's newest concepts: generative AI, agentic AI and physical AI. A common base, open to all. The glossary was started within Embedded France's Embedded AI Working Group, with the Eclipse Foundation, CEA, Leminnov, Quantyss, the European Trustworthy AI Association and Lianeo, each bringing a complementary perspective, from research and industry to governance and open source. They compared how they use each term and, working collegially, agreed on a first set of common definitions. The glossary does not claim to be exhaustive or prescriptive: it is a common base, open to corrections and contributions from everyone who uses it. "This glossary provides European industry with a shared foundation to master embedded and physical AI. By structuring our vocabulary, we structure our skills," said Eliane Fourgeau, Vice-President of Embedded France. "It is a strategic tool to strengthen technological sovereignty, accelerate talent development and support the emerging physical AI economy across all sectors." Openly published under a Creative Commons licence. Released under the Creative Commons Attribution 4.0 International licence, the glossary can be read, downloaded, reproduced, translated and adapted freely, including for commercial use, on one condition: credit the source. Companies can attach it to a specification, schools can build courses around it, and standards bodies can cite it. It is hosted by the Eclipse Foundation within the Eclipse Aidge project and maintained as an open project: corrections, clarifications and new terms are submitted through its public repository. This new release of the glossary will be presented at the Assises de l'Embarqué on 26 January 2027, an edition devoted to physical AI. "A shared vocabulary is an important foundation for collaboration, particularly when AI safety, security, and reliability are at stake," said Mike Milinkovich, Executive Director of the Eclipse Foundation. "Making this glossary openly available gives developers, researchers and industry a common reference point, helping them work together more effectively to advance trustworthy embedded AI." The glossary at A glance. | - More than 300 definitions across 13 chapters - Seven initial contributors, open to everyone's contributions - Creative Commons Attribution 4.0 International licence - Read the glossary: https://pages.eclipse.dev/eclipse/aidge/embedded-ai-glossary/ - Contribute: https://gitlab.eclipse.org/eclipse/aidge/embedded-ai-glossary | Embedded France. Embedded France is the French professional organisation dedicated to embedded technologies. It brings together industrial, academic and institutional stakeholders involved in embedded systems, critical software, hardware architectures and embedded AI solutions. Embedded France leads sector-specific working groups, contributes to national and European initiatives, and supports ecosystem structuring to reinforce technological sovereignty and talent development. Eclipse Foundation. The Eclipse Foundation is an international non-profit organisation providing a vendor-neutral home for open source innovation, with more than 450 projects spanning a broad range of technology domains and over 300 member organisations worldwide. Its Sovereign AI Foundation brings members together to strengthen choice and control over AI technologies. The Foundation's growing AI ecosystem includes projects such as Eclipse Aidge, Eclipse Theia AI, and Eclipse LMOS, spanning embedded and industrial AI, AI-assisted development, and agentic AI. Together, these efforts help organisations develop and adopt open AI technologies with greater transparency, flexibility, and control. CEA. The CEA works to promote the scientific, technological and industrial sovereignty of France and Europe in four key areas: low-carbon energy, digital technology, the medicine of the future, and defence and security, drawing on excellence in fundamental research. As a public technological research organisation, the CEA contributes to the scientific, technological and industrial sovereignty of France and Europe. For further information: www.cea.fr Leminnov. Leminnov is a French deep-tech company engineering the trusted digital infrastructure that brings Cloud Native, Edge Computing and AI together. It designs and industrialises secure, resilient and interoperable platforms that enable organisations to deploy and operate AI and distributed workloads from cloud to edge, leveraging open technologies, Platform Engineering and DevSecOps practices. As a member of Embedded France and Numeum, and part of the French Tech ecosystem, Leminnov contributes to building open and trusted technology ecosystems that strengthen interoperability, industrial innovation and European technological sovereignty. Quantyss. Quantyss is a strategy consultancy dedicated to deep-tech growth. It guides startups, SMEs and mid-caps from vision to market traction - aligning technology, investors and industry. European Trustworthy AI Association. The European Trustworthy AI Association is a non-profit organisation established in 2025 in Brussels, Belgium, by industrial leaders, building on the legacy of the Confiance.ai programme. It brings together some thirty European organisations, industrial companies, startups, academic institutions and research centres, with the mission of empowering industry with state-of-the-art open-source methods and tools to engineer AI-based systems that can be trusted and comply with regulations. Lianeo. Lianeo is a consulting company specialising in embedded systems and IoT. Since 2012, it has supported manufacturers in telecoms, automotive, medical, defence and aerospace in developing their embedded and critical software.

The Quantum Insider
Oct 7th, 2026
Eclipse Qrisp wins Quantum Effects Award 2026 for quantum software.

Eclipse Qrisp wins Quantum Effects Award 2026 for quantum software. Insider Brief * Eclipse Foundation, an open-source quantum programming framework initiated by Fraunhofer FOKUS, won the 2026 Quantum Effects Award in the Quantum Computing Software & Algorithms category. * The Python-based framework provides higher-level programming constructs and compiles them into optimized quantum circuits for different quantum computing environments. * Qrisp supports hybrid quantum-classical computing, multiple quantum backends and integration with NVIDIA CUDA-Q while contributing to the SecQDevOps project. PRESS RELEASE - The Eclipse Foundation, one of the world's largest open source software foundations, today announced that Eclipse Qrisp, an open source framework for high-level quantum programming initiated by Fraunhofer FOKUS, has won the Quantum Effects Award 2026 in the Quantum Computing Software & Algorithms category. As quantum computing advances, one of the fundamental challenges is making increasingly sophisticated quantum systems practical to program. Developers often work close to the hardware level, constructing algorithms through individual quantum gates, circuits, and qubits. Eclipse Qrisp moves quantum programming up the software stack. Built on Python, it enables developers to express complex quantum algorithms using familiar concepts such as variables, functions, and control flow, then compiles those programs into optimised quantum circuits for execution across different quantum computing environments. "Realizing the potential of quantum computing depends on making increasingly sophisticated systems practical to program," said Michael Plagge, Chief Membership Officer at the Eclipse Foundation. "Developers should not have to think about every individual gate operation any more than modern software developers think about individual processor instructions. Eclipse Qrisp raises the level of abstraction, enabling developers to focus on the algorithm while the compiler manages much of the underlying complexity. This award is tremendous recognition for Fraunhofer FOKUS and the Eclipse Qrisp community." The Quantum Effects Award recognises application-oriented innovation in quantum technologies. An international jury of experts from science, industry, technology transfer, and investment selected the 2026 winners based on innovation, application potential, feasibility, and collaboration between research and industry. The award was presented at Quantum Effects, the international trade fair and conference for quantum technologies taking place 6-7 October 2026 at Messe Stuttgart, Germany. Moving quantum programming up the software stack. Qrisp abstracts much of the complexity of working directly with individual qubits and gates through higher-level constructs such as typed quantum variables, functions, automatic memory management, and control flow. Developers can focus more on what an algorithm should accomplish, while Qrisp handles much of the underlying circuit construction and quantum resource management. By preserving the higher-level structure of a program, Qrisp gives its compiler more information to optimise the resulting quantum circuits. The framework supports hybrid quantum-classical computing through JAX and can target different quantum computing backends, giving developers greater portability across hardware environments. Qrisp's ecosystem is expanding through integration with NVIDIA CUDA-Q, connecting its high-level programming model with CUDA-Q's quantum simulation and hardware backends. Building an open quantum software ecosystem. As quantum hardware and software evolve rapidly, Qrisp provides an open, vendor-neutral platform for building quantum algorithms. Developed openly as an Eclipse Foundation project, it gives researchers, developers, hardware providers, and industry a common environment for collaboratively advancing high-level quantum programming across different hardware environments. Eclipse Qrisp is also contributing to SecQDevOps, a Horizon Europe project exploring how security, testing, compliance, and DevOps practices can be integrated across quantum software and hardware development. Qrisp provides a high-level programming layer that can target different quantum computing backends, supporting this broader effort to make quantum software development more systematic, secure, and scalable. Explore Eclipse Qrisp, try the framework, or contribute to the project at qrisp.eu and GitHub. Mohib ur rehman. Covering quantum and emerging technologies, Mohib explores the intersection of technology, security, and society. His work also frequently examines surveillance infrastructure and the institutions shaping the digital world. In addition to his work at The Quantum Insider, he co-runs SK NEXUS, an independent technology publication that helps readers understand the technologies shaping their lives. Stay Ahead of Quantum Get the latest research, company news, and market intelligence every week. More in Research

Eclipse
Sep 10th, 2026
Eclipse Foundation releases free toolkit to help SMEs prepare for the EU Cyber Resilience Act.

Eclipse Foundation releases free toolkit to help SMEs prepare for the EU Cyber Resilience Act. Thursday, September 10, 2026 - 07:00 by Natalia Loungou BRUSSELS - 10 September 2026 - The Eclipse Foundation, one of the world's largest open source software foundations, today announced the availability of a free, open source toolkit developed through the EU-funded OCCTET project to help small and medium-sized enterprises (SMEs) and open source projects prepare for the European Union's Cyber Resilience Act (CRA). The toolkit translates complex regulatory requirements into practical steps that organisations can incorporate into their software development and security processes. It helps them assess their readiness, identify which open source components are used in their products, manage vulnerabilities, and document how security risks are being addressed. The release comes as the CRA's first obligations take effect. Beginning 11 September 2026, manufacturers must report actively exploited vulnerabilities and severe incidents affecting the security of products with digital elements made available in the European Union. The CRA's broader requirements will apply from 11 December 2027. Early use of the OCCTET self-assessment platform has identified a common challenge: many SMEs have security measures in place but lack the visibility, documentation, and consistent processes needed to demonstrate how software risks are being managed. "For organisations with limited compliance resources, preparing for the CRA is a major undertaking," said Mike Milinkovich, executive director of the Eclipse Foundation. "OCCTET makes that work more manageable by bringing together tools that help them understand their obligations, identify and address vulnerabilities, and maintain the records needed to support compliance." A practical path from assessment to action. The OCCTET toolkit combines multiple services that support organisations from initial assessment through vulnerability management and documentation. SMEs and open source projects can now access and test the following services: * Assess readiness: The CRA Self-Assessment Portal helps SMEs understand how the CRA applies to them, evaluate their current readiness, and identify areas requiring attention. The free, guided assessment translates CRA provisions into structured questions, scoring, and practical recommendations. * Identify software components: Eclipse Apoapsis (OCCTET instance) identifies open source components, dependencies, and licenses, based on the OSS Review Toolkit and known vulnerabilities. It can also generate a range of CRA-ready reports and compliance artefacts, including Software Bills of Materials (SBOMs), which provide a standardised inventory of the software components contained in a product. * Review findings and take action: Bitsea Curator (OCCTET instance) combines automated analysis with human review to help users verify software information, assess whether vulnerabilities affect their products, prioritise issues, and document their decisions. It also supports the creation of Vulnerability Exploitability eXchange (VEX) reports, which record whether a product is affected by a known vulnerability. * Reuse shared software information: The Federated OSS Assessment Database, vulnerablecode.io, provides information about open source packages, including their origins, licenses, security advisories, vulnerabilities, and reference SBOMs. Its public PurlDB demonstrator supports reference SBOM generation for more than 20 million packages, while its VulnerableCode integration connects vulnerability information with the software packages it affects. The toolkit has been validated against complex, real-world software dependency scenarios across ten different technology ecosystems. Testing has included widely used open source projects, large-scale analysis of the Eclipse Foundation's entire project portfolio, as well as a growing number of real-world SME use cases. This extensive validation demonstrates the toolkit's ability to operate across diverse technologies, project sizes, and software supply chains. This testing has demonstrated its ability to analyse complex dependency structures, identify vulnerabilities, support human review, and monitor security issues over time. Get started with OCCTET. The Open Source Compliance: Comprehensive Techniques and Essential Tools (OCCTET) project brings together industry leaders, cybersecurity experts, SME representatives, and open source organisations to make software security and CRA preparation more accessible, transparent, and cost-effective. SMEs and open source projects can explore the toolkit and available resources at occtet.eu. Organisations interested in testing the services using real products and development workflows, and providing feedback to support their continued improvement, can visit the OCCTET Get Engaged page. OCCTET complements the Eclipse Foundation's broader work to help organisations and open source communities prepare for the CRA. Through the Open Regulatory Compliance (ORC) Working Group, participants are developing community-driven specifications, guidance, training, and other resources to support CRA implementation across the open source ecosystem. These resources include the free ORC Learning Hub, which provides practical, role-specific training to help open source developers, maintainers, project stewards, product teams, and security and compliance professionals understand how the CRA applies to their work and put its requirements into practice. The community also comes together through Code & Compliance, the flagship ORC event for open source developers, project stewards, legal and compliance professionals, policymakers, and industry leaders. The next event takes place on 27 October 2026 in Brussels, providing a forum to exchange experiences, share practical guidance, and explore how the CRA and other emerging digital regulations are affecting the open source ecosystem. Register now to join the discussion. About the OCCTET project. Open Source Compliance: Comprehensive Techniques and Essential Tools (OCCTET) is an EU-funded initiative focused on helping SMEs and open source projects navigate cybersecurity and compliance requirements under the Cyber Resilience Act. Coordinated by the Eclipse Foundation, the project is developing an integrated suite of free, open source tools for readiness assessment, software dependency analysis, vulnerability management, SBOM generation, and compliance documentation. The OCCTET project has received funding from the Digital Europe Programme under grant agreement No. 101190474. The content does not necessarily reflect the views of the European Commission. The European Commission is not liable for any use that may be made of the information contained herein. About the Eclipse Foundation. The Eclipse Foundation provides a global community of individuals and organisations with a vendor-neutral, business-friendly environment for open source collaboration and innovation. Eclipse Group host Adoptium, the Eclipse IDE, Jakarta EE, Open VSX, Software Defined Vehicle, and more than 450 high-impact open source projects. Headquartered in Brussels, Belgium, Eclipse Group is an international non-profit association supported by over 300 members. Its events, including Open Community Experience (OCX), bring together developers, industry leaders, and researchers from around the world. To learn more, follow Eclipse Group on X and LinkedIn, or visit eclipse.org. Media contacts: Schwartz Public Relations Julia Rauch/Luca Myska Sendlinger Straße 42A 80331 München +49 (89) 211 871 -43/ -52 514 Media Ltd (France, Italy, Spain) Benoit Simoneau M: +44 (0) 7891 920 370 Nichols Communications (Global Press Contact) Jay Nichols +1 408-772-1551

GlobeNewswire
Jul 30th, 2026
Eclipse Foundation and OWASP join forces to strengthen Open Source security and CRA readiness.

Eclipse Foundation and OWASP join forces to strengthen Open Source security and CRA readiness. Strategic collaboration will unite two global open source communities to advance security practices, support maintainers and stewards, and help organisations prepare for the EU Cyber Resilience Act. BRUSSELS and WILMINGTON, Del., July 30, 2026 (GLOBE NEWSWIRE) - The Eclipse Foundation, one of the world's largest open source software foundations, and the Open Worldwide Application Security Project (OWASP), a global nonprofit foundation dedicated to improving software security, today announced a Memorandum of Understanding (MoU) to strengthen open source security and support industry readiness for the European Union's Cyber Resilience Act (CRA). The agreement combines the Eclipse Foundation's expertise in open source governance, industry collaboration, and regulatory readiness with OWASP's globally recognised security projects, standards, education, and community. The organisations will develop resources to help open source maintainers, stewards, manufacturers, and software teams strengthen security practices and respond to evolving regulatory requirements. "Open source is critical digital infrastructure, but responsibility for securing it is distributed across a complex global ecosystem," said Mike Milinkovich, executive director of the Eclipse Foundation. "With AI accelerating both software development and vulnerability discovery, and the first CRA obligations taking effect in a matter of weeks, the need for practical, coordinated action is increasingly urgent. By bringing together the expertise and communities of the Eclipse Foundation and OWASP, we can reduce fragmentation and help organisations put stronger security and regulatory readiness practices into action." The CRA introduces mandatory cybersecurity requirements for products with digital elements made available in the EU, including products built with or dependent on open source software. Its vulnerability and incident reporting obligations for manufacturers take effect on 11 September 2026, requiring organisations to establish the processes and technical capabilities needed to identify, manage, and report serious security issues. The regulation also formally recognises open source software stewards as important participants in the software supply chain. Although their responsibilities differ from those of commercial manufacturers, stewards will play an important role in supporting secure development, vulnerability management, transparency, and cooperation across the open source ecosystem. "Security guidance only makes a difference when developers, maintainers, and organisations can put it into practice," said Andrew van der Stock, executive director of the OWASP Foundation. "By working with the Eclipse Foundation, we can extend the reach and impact of OWASP's security expertise while giving open source communities clearer, more actionable ways to strengthen the software supply chain and prepare for the CRA." Although the CRA is a European regulation, its implications extend globally. Any organisation that makes software-enabled products available in the EU must understand its responsibilities, including how it develops, integrates, documents, maintains, and secures the open source components on which those products depend. With more than 96% of commercial codebases containing open source software, according to the OpenLogic 2026 State of Open Source Report, CRA readiness is an urgent consideration across the global software industry. Under the MoU, the Eclipse Foundation and OWASP intend to collaborate across five principal areas: * CRA readiness for the open source ecosystem * Alignment and interoperability among security practices and frameworks * Joint education and community engagement * Open source stewardship and maintainer support * Policy and regulatory education Initial priorities are expected to include practical guidance for open source stewards, joint CRA readiness webinars, resources supporting software bill of materials (SBOM) adoption and software supply chain security, and community events, workshops, and maintainer roundtables. The two organisations also participate jointly in the Eclipse Foundation's Open Regulatory Compliance Working Group (ORC WG), which brings together open source foundations, global enterprises, and industry stakeholders to develop practical resources for navigating the growing impact of software regulation on open source. The organisations do not intend to create competing security frameworks. Instead, they will work to align and amplify existing initiatives, improve adoption, and help organisations embed sustainable security and regulatory readiness practices across the software lifecycle. About OWASP The OWASP Foundation is a nonprofit organisation that works to improve software security. Through community-led open source software projects, over 260 local chapters worldwide, tens of thousands of members, and leading educational and training conferences, the OWASP Foundation is the source for developers and technologists to secure the web. For nearly two decades, corporations, foundations, developers, and volunteers have supported the OWASP Foundation and its work. To learn more or to become a member, visit owasp.org. About the Eclipse Foundation The Eclipse Foundation provides a global community of individuals and organisations with a vendor-neutral, business-friendly environment for open source collaboration and innovation. We host Adoptium, the Eclipse IDE, Jakarta EE, Open VSX, Software Defined Vehicle, and more than 450 high-impact open source projects. Headquartered in Brussels, Belgium, we are an international non-profit association supported by over 300 members. Our events, including Open Community Experience (OCX), bring together developers, industry leaders, and researchers from around the world. To learn more, follow us on X and LinkedIn, or visit eclipse.org. Media contacts: Schwartz Public Relations Julia Rauch/Luca Myska Sendlinger Straße 42A 80331 München [email protected] +49 (89) 211 871 -43/ -52 514 Media Ltd (France, Italy, Spain) Benoit Simoneau [email protected] M: +44 (0) 7891 920 370 Nichols Communications (Global Press Contact) Jay Nichols [email protected] +1 408-772-1551

Yahoo Finance
Jun 30th, 2026
Eclipse Foundation launches free ORC Learning Hub to help developers prepare for EU Cyber Resilience Act

The Eclipse Foundation and the Open Regulatory Compliance Working Group have launched the ORC Learning Hub, a free education initiative to help open source developers and software teams prepare for the EU's Cyber Resilience Act ahead of the September 2026 deadline. The hub provides role-specific training for developers, maintainers, project stewards, product teams, security professionals and legal teams. Whilst the CRA is European regulation, its impact is global, affecting any organisation distributing software-enabled products in the EU market. According to the OpenLogic 2026 State of Open Source Report, over 96% of commercial codebases contain open source software. The initiative addresses a gap in practical guidance by delivering actionable, role-specific education aligned with modern software development practices.