Well, I've tried but one of first links in google search <https://www.european-cyber-resilience-act.com/> tells how important its for cyber security for pages, without giving me a link to real thing.
Besides, I've looked python foundation's page where it says, "In particular, we believe that there are two phrases in the CRA that cast too wide of a net. In Article 16, “A natural or legal person, other than the manufacturer, the importer or the distributor, that carries out a substantial modification of the product with digital elements shall be considered a manufacturer for the purposes of this Regulation.” is too broad. " IANAL but I'm pretty sure real manufacturers will try to use that article somehow to blame contributors.
