"Secure Software Lifecycle for Open Source Software" according to the German Federal Office for Information Security (BSI)

https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/TechGuidelines/TR03185/BSI-TR-03185-2.pdf

@bagder Thx for sharing this. Our products are not OSS, but I'm in the process of gathering all sorts of information about the upcoming #CRA and this might be helpful.