EU’s Cyber Resilience Act repercussions in open source