Joining Forces for Open Source Cybersecurity Standards

Will we join these efforts?
https://thephp.foundation/blog/2024/04/02/open-source-community-cra-compliance-initiative/

There's a risk that, say, MediaWiki consultants be inundated by 
paperwork in the EU if they suddenly get treated as "manufacturers". 
This can probably be avoided with some shared documentation work 
(handled by WMF?), as long as the ~40 expected upcoming standards do not 
hardcode some FLOSS-hostile methods of doing things.

MediaWiki development and deployment processes tend to be quite 
peculiar, so it would be nice to make sure they're covered. (Some work 
with Debian may also help, as MediaWiki is packaged there and some 
MediaWiki projects are under SPI? Not sure.)

In case you have no idea what it is about:
https://wikimedia.brussels/cyber-resilience-act-its-a-wrap/
https://blog.nlnetlabs.nl/what-i-learned-in-brussels-the-cyber-resilience-act/
https://berthub.eu/articles/posts/eu-cra-what-does-it-mean-for-open-source/

And specifically on standards:
https://fosdem.org/2024/schedule/event/fosdem-2024-3395-cra-40-new-ways-the-cra-can-accidentally-harm-open-source/
https://www.youtube.com/watch?v=jvKvsP6OGKw

Federico