Dependency Combobulator ne mai buɗaɗɗen kayan aikin kayan aiki don magance rikice-rikice / harin maye gurbin dogaro. Wato, waɗannan hare-haren da ke cin gajiyar ma'ajiya na jama'a ko na sirri na ayyukan software don rikitar da manajan kunshin da fakitin fakitin da za su zama abin dogaro amma suna da niyyar kai wani nau'in hari.
Apiiro ya ƙaddamar da Dependency Combobulator daidai don samun damar yaƙar wannan. Kit ɗin kayan aiki mai iya gano da hana waɗannan hare-haren. Wadannan hare-haren an gano su ne kwanan nan, kuma sun girma a matsayin hari a yau. A takaice dai, tare da wannan kit ɗin za ku iya guje wa irin wannan nau'in hoax na dogaro wanda ya ƙare ya zama fakitin ɓarna (maimakon shigar da ingantaccen abin dogaro wanda ya kamata a sanya shi don software ɗin da manajan fakitin ke girka).
A cikin waɗannan lokuta, masu amfani ba su sani ba, sun amince da mai sarrafa kunshin wanda shine wanda ke sarrafa aikin abubuwan dogaro. Koyaya, za su ba da izinin lambar ɓarna ba tare da sanin ta ba. Wannan shine inda Dependency Combobulator ke samun ban sha'awa, don kimanta tushe daban-daban kamar GitHub, JFrog Artifatory, da sauransu.
An haɓaka wannan kayan aiki a cikin harshen shirye-shiryen Python, kuma yana amfani da a injin heuristic wanda ke aiki akan samfurin fakitin m, yana ba da sauƙi mai sauƙi. Baya ga sassauci, yana kuma iya jagorantar ƙwararrun tsaro don yanke shawara mafi kyau. Ana iya haɗa shi cikin sauƙi, kuma yana buɗewa ta atomatik.
"A sakamakon shawarar da mai binciken tsaro Alex Birsan ya yanke na yin sulhu da muhallin da Apple, Microsoft, da PayPal ke kula da su a farkon wannan shekara, masana'antar ta dandana. barkewar tashin hankali kama da sarkar samar da kayayyaki” in ji Moshe Zioni, mataimakin shugaban binciken tsaro na Apiiro. "Mun yi ɗokin ba da amsa ta hanyar ƙirƙira gungun kayan aikin da za su iya rage irin wannan barazanar kuma su kasance masu sassauƙa da ƙarfi don yaƙar raƙuman ruɗani a nan gaba. Magance wannan harin yana da mahimmanci ga ƙungiyoyi don samun nasarar amintar da sarƙoƙin samar da software. ".