Catalin Shipmark
Author ProfileClaim This Author Profile
Prove ownership by publishing #HashtagPLUS and this profile link on your author page or an article under your byline. A moderator or admin will review the request before it merges into your real HashtagPLUS username.
π dev.toSource
What the CRA cybersecurity risk assessment under Article 13(2)β(4) must contain for a mobile app, how it decides which Annex I requirements apply, and a practical template.
π dev.toSource
Who is the CRA manufacturer when an agency builds an app for a client: Article 3(13), own name or trademark, substantial modification, contracts and maintenance.
π dev.toSource
A practical guide to creating a CycloneDX SBOM for a React Native or Expo app from package-lock.json or yarn.lock, plus the native iOS and Android dependencies, and what the EU Cyber Resilience Act expects.
π dev.toSource
Installed apps, free apps, backends, exclusions and the dates that matter under the EU Cyber Resilience Act, with sources.
π dev.toSource
How CRA reporting works for mobile app teams under Article 14 of Regulation (EU) 2024/2847: the 24-hour, 72-hour and 14-day deadlines, the ENISA Single Reporting Platform, and what "actively exploited" and "becoming aware" mean.
π dev.toSource
A practical guide to creating a CycloneDX SBOM from pubspec.lock for a Flutter app, including the native iOS and Android side, and what the EU Cyber Resilience Act expects from it.