CRA compatibility

[libremente]

Ciao,
while I was writing this comment #197 (reply in thread) I thought that it could become a discussion on its own.
Since the Cyber Resilience Act has introduced several things, such as naming conventions, requirements etc., I am wondering if it could be beneficial to address those somewhere inside our dear publiccode.yml.

Maybe we could start by using some terms of the CRA (like stewards) in the description of some keys and eventually add some keys that could help during the selection, like security contacts (RDP which usually has different entry points than regular contacts) or the URL for the declaration of conformity, or a key dedicated to SBOMs and so on.

Does this make any sense?