EU is doubling down on open source security and now even starting with their compliance policies for enterprises. I'm sure early signs of this will soon show to the US by 2027, OpenSSF and CISA have been pretty vocal about this