Welp, @linuxfoundation saying it out loud: CRA as currently drafted means we will likely see "not for use in the EU" notices on open source code.

My own sense is that this is (1) reasonable and (2) consistent with traditional notions of open source, which has allowed withdrawal of code where legal burdens (historically patents) creates risks for the authors. But convincing people about that parallel is going to be hard.

https://www.linuxfoundation.org/blog/open-source-and-the-cra-will-not-work