Kima na ɗakunan karatu na buƙatar binciken tsaro na musamman

Gidauniyar Linux Foundation ta kafa Ƙaddamarwa Ƙaddamarwa Ƙaddamarwa, wanda manyan kamfanoni suka haɗa ƙarfi don tallafawa ayyukan buɗaɗɗen tushe a mahimman fannoni na masana'antar kwamfuta. kashe karatu na biyu a cikin shirin Ƙidayar, da nufin gano ayyukan buɗaɗɗen tushe waɗanda ke buƙatar tantance fifikon tsaro.

Nazarin na biyu ya mayar da hankali kan nazarin lambar tushe mai buɗewa da aka yi amfani da ita a fakaice a cikin ayyukan kasuwanci daban-daban ta hanyar dogaro da aka zazzage daga ma'ajiyar waje. Rashin lahani da sasantawa na masu haɓaka abubuwan ɓangare na uku waɗanda ke da hannu a cikin aiwatar da aikace-aikacen (sarkar samarwa) na iya ƙin duk ƙoƙarin inganta kariyar babban samfur. Sakamakon binciken ya kasance ayyana Fakiti 10 da aka fi amfani da su a cikin JavaScript da Java, tsaro da kiyayewa waɗanda ke buƙatar kulawa ta musamman.

Dakunan karatu na JavaScript daga ma'ajiyar npm:

• async (Layi na lamba dubu 196, marubuta 11, masu aiwatarwa 7, batutuwan buɗe 11);
• gado (Layi na lamba dubu 3.8, marubuta 3, mai aiwatarwa 1, matsalolin 3 da ba a warware su ba);
• Isra'i (Layi na lamba 317, marubuta 3, masu aiwatarwa 3, batutuwan buɗe 4);
• irin-na (Layi na lamba dubu 2, marubuta 11, masu aiwatarwa 11, matsalolin 3 da ba a warware su ba);
• lodash (Layin layi na 42, 28 mawallafa, masu aikatawa 2, 30 buɗaɗɗen batutuwa);
• minimist (1.2 dubu Lines code, 14 marubuta, 6 masu aikatawa, 38 bude al'amurran da suka shafi);
• mazauna ƙasar (Layi na lamba dubu 3, marubuta 2, mai aiwatarwa 1, babu buɗaɗɗen batutuwa);
• qs (5.4 dubu layin code, 5 marubuta, 2 masu aikatawa, 41 bude al'amurran da suka shafi);
• rafi mai karantawa (28 dubu layin code, 10 marubuta, 3 masu aikatawa, 21 bude al'amurran da suka shafi);
• string_decoder (Layi na lamba dubu 4.2, marubuta 4, masu aiwatarwa 3, batutuwan buɗe 2).

Dakunan karatu na Java daga wuraren ajiyar Maven:

• jackson-core (74 dubu Lines code, 7 marubuta, 6 masu aikatawa, 40 bude al'amurran da suka shafi);
• jackson-databind (74 dubu Lines code, 23 marubuta, 2 masu aikatawa, 363 bude al'amurran da suka shafi);
• guwa.git, Dakunan karatu na Google don Java (layin layukan miliyan 1, mawallafa 83, masu aiwatarwa 3, batutuwan buɗe 620);
• Commons-codec (51 dubu Lines code, 3 marubuta, 3 masu aikatawa, 29 bude al'amurran da suka shafi);
• gama-io (73 dubu Lines code, 10 marubuta, 6 masu aikatawa, 148 bude al'amurran da suka shafi);
• http componts-abokin ciniki (121 dubu Lines code, 16 marubuta, 8 masu aikatawa, 47 bude al'amurran da suka shafi);
• httpcomponents-core (Layi na lamba dubu 131, marubuta 15, masu aiwatarwa 4, batutuwan buɗe 7);
• shiga (154 dubu layin code, 1 marubucin, 2 masu aikatawa, 799 buɗaɗɗen batutuwa);
• gama-gari (168 dubu Lines code, 28 marubuta, 17 masu aikatawa, 163 bude al'amurran da suka shafi);
• slf4j (Layi na lamba dubu 38, mawallafa 4, masu aiwatarwa 4, batutuwan buɗe 189);

Rahoton ya kuma yi bayani kan batutuwan daidaita tsarin sanya suna na abubuwan da ke waje, kare asusun masu haɓakawa, da kiyaye juzu'in gado bayan an yi manyan sabbin abubuwan da aka fitar. Bugu da ƙari, Linux Foundation ya buga da daftarin tare da shawarwari masu amfani don tsara ingantaccen tsarin ci gaba don ayyukan buɗaɗɗen tushe.

Daftarin aiki yana magana game da batutuwan rarraba ayyuka a cikin aikin, ƙirƙirar ƙungiyoyi masu alhakin tsaro, ayyana manufofin tsaro, sa ido kan ikon da mahalarta aikin ke da shi, yin amfani da Git daidai lokacin da ake gyara rashin ƙarfi don gujewa leaks kafin buga gyara, ayyana matakai don amsa rahotanni. na matsaloli tare da tsaro, aiwatar da tsarin gwajin tsaro, aikace-aikacen hanyoyin bita na lamba, la'akari da sharuɗɗan da suka danganci tsaro lokacin ƙirƙirar saki.

source: budenet.ru