Cyber Resilience Act, already too late to comply?

If you are taking your decisions now for complying with all the requirements of CRA, you might be too late to find adequate external resources to comply , although — at submission time — it is not yet in force. So what are you gonna do? Being open source would help only to a certain point, if you monetize the software. Some guidance tips for Open Source projects and businesses.