Plan your support period
The CRA requires a support period of at least five years (or the product's expected lifetime, if longer), counted from when it is placed on the market. Enter your dates to see your support and retention deadlines, and to flag any component that goes End-of-Life too soon.
Your key dependencies and their End-of-Life dates live in your software bill of materials. Rather than entering them by hand, the Vulnerability Analyzer reads your SBOM and identifies component End-of-Life automatically; feed those dates back in here to check them against your support period.
A component whose End-of-Life falls before your support period ends will leave you maintaining unsupported software; plan a replacement or an extended-support arrangement before then. Indicative only; not legal advice. Verify against Article 13(8)–(9) and 31(3) of Regulation (EU) 2024/2847.
