FAQ As a Manufacturer how do I approach conformity assessment (aka CE marking) if I consume open-source components?

[rozhukov]

There are a few points a Manufacturer should consider:

• The Commission expects the equal level of due diligence for dependencies as for own product
• Declaration of intended purpose is an important part, that should be reflected in giving instructions for users, publishing threat model, security by default settings, etc.