Mai haɓakawa ya yi canje-canje masu lalata ga launuka da fakitin NPM na faker da aka yi amfani da su a cikin ayyukan 20 dubu

Marak Squires, marubucin shahararrun launuka (node.js console colorization) da faker (janatocin bayanan karya don filayen shigarwa), tare da abubuwan zazzagewa miliyan 2.8 da miliyan 25 na mako-mako, ya buga sabbin nau'ikan samfuransa a cikin ma'ajiyar NPM kuma akan GitHub , gami da sauye-sauye masu lalacewa waɗanda da gangan ke haifar da gazawa a matakin taro da aiwatar da ayyukan dogaro. Sakamakon ayyukan Marak, ayyukan da yawa, ciki har da AWS CDK, ta yin amfani da ƙayyadaddun ɗakunan karatu sun lalace - ana amfani da ɗakin karatu na launuka azaman abin dogaro a cikin ayyukan 18953, kuma ana amfani da faker a cikin 2571.

A cikin lambar ɗakin karatu na "launuka", kayan wasan bidiyo na rubutun "LIBERTY LIBERTY LIBERTY" an ƙara madauki mara iyaka, tare da toshe ayyukan ayyukan dogaro da fitar da rafi na karkatattun kalmomi "gwaji". Laburaren karya ya cire abubuwan da ke cikin ma'ajiyar, ya kara .gitignore da .npmignore fayiloli zuwa "karshen wasan" sadaukar don ware fayilolin aikin, kuma ya maye gurbin abubuwan da ke cikin fayil ɗin README tare da tambayar "Abin da Ya Faru Da Haruna Swartz." Matsaloli suna nan a cikin nau'ikan launuka 1.4.1+ da faker 6.6.6.

Mai haɓakawa ya yi canje-canje masu lalata ga launuka da fakitin NPM na faker da aka yi amfani da su a cikin ayyukan 20 dubu

Dangane da waɗannan ayyukan, GitHub ya toshe hanyar Marak zuwa ma'ajiyar ta (jama'a 90 + da yawa masu zaman kansu), kuma NPM ta mayar da sigar ɓarna na fakitin. A lokaci guda, halaccin ayyukan GitHub yana haifar da tambayoyi, tun da cire lambar da mai haɓakawa ya yi daga ɗayan ma'ajin sa ba za a iya la'akari da keta dokokin sabis ɗin ba. Bugu da ƙari, rubutun lasisi don launuka da fakitin faker yana faɗi a sarari cewa babu wani garanti ko wajibai dangane da ayyukan lambar.

Abin sha'awa, an buga gargaɗin farko game da dakatar da ci gaba fiye da shekara guda da ta wuce. A watan Satumban 2020, Marak ya yi asarar dukiyoyin sa sakamakon gobara, bayan da a farkon watan Nuwamba, a matsayin wa'adi, ya yi kira ga kamfanonin kasuwanci da ke amfani da ayyukansa don ci gaba da samun ci gaba, in ba haka ba ya yi alkawarin daina ba shi goyon baya. tunda ya daina niyyar yin aiki kyauta. Kafin faruwar lamarin, an fitar da sabon nau'in launuka shekaru biyu da suka gabata, kuma an saki faker watanni 9 da suka gabata.

Dangane da dalilansa na yin sauye-sauye masu lalacewa a cikin kunshin, mai yiwuwa Marak yana ƙoƙari ya koyar da darasi ga kamfanoni masu cin gajiyar ayyukan software na kyauta ba tare da mayar da komai ba, ko kuma jawo hankali ga sake tunani game da yanayin mutuwar. Haruna Swartz. Haruna ya kashe kansa bayan da aka gabatar da wani laifi a kansa dangane da kwafin labaran kimiyya daga asusun ajiyar kuɗi na JSTOR, yana kare ra'ayin ba da damar samun damar yin amfani da wallafe-wallafen kimiyya kyauta. An tuhumi Haruna da laifin zamba na kwamfuta da kuma samun bayanai ba bisa ka'ida ba daga na'urar kwamfuta mai kariya, mafi girman hukuncin daurin shekaru 50 a gidan yari da kuma tarar dala miliyan daya (idan an cimma yarjejeniyar kotu kuma aka shigar da karar, Haruna zai yi aiki. watanni 6 a gidan yari).

An yi imanin cewa Haruna, a cikin baƙin ciki, ba zai iya jure wa matsin lamba na tsarin shari'a ba da kuma rashin adalci na tuhumar da aka gabatar (yana fuskantar shekaru 50 a gidan yari kawai don sauke abubuwan da ke cikin ma'ajin bayanai na kimiyya, wanda a ra'ayinsa). ya kamata a rarraba ba tare da ƙuntatawa ba). Marak Squires, a cikin wata tambaya game da mutuwar Haruna da aka buga a maimakon wani lambar da aka goge kuma a cikin wani sakon da ya wallafa a shafin Twitter, ya yi nuni ga wata ka'idar da ba a tabbatar da ita ba, kamar yadda Aaron Swartz ya gano wasu takardu a cikin rumbun adana bayanan MIT da suka tozarta wasu muhimman mutane, kuma ya kasance. aka kashe dominsa.yana kama da zuwan a matsayin kashe kansa (gobe shekara 9 kenan da rasuwa Haruna).

source: budenet.ru

Add a comment