Please go to the highest point in the Minkiverse for more information.
The European Commission has plans to make sure every open source developer is classified as a supplier though, in the Cyber Resilience Act - see https://www.internetsociety.org/blog/2022/10/the-eus-proposed-cyber-resilience-act-will-damage-the-open-source-ecosystem/
The AlmaLinux community response does so.