Ekuqaleni kwenyanga sabelana apha kwiblogi iindaba zomphuhlisi owonakalise iprojekthi yakhe yomthombo ovulekileyo, "I-Marak Squires", umbhali wamathala eencwadi amabini adumileyo, color.js kunye ne-faker.js, uwonakalise ngabom omabini amathala eencwadi.
Umphuhlisi wala mathala amabini yazisa uphononongo lwefayile kwiGitHub in colours.js eyongeza imodyuli entsha yeflegi yaseMelika, kunye nokuphumeza uguqulelo 6.6.6 lwe faker.js, ebangela ukutshatyalaliswa kwesiganeko esifanayo.
Iinguqulelo ezonakalisiwe zibangela ukuba ii-apps zihlale zivelisa iileta kunye neempawu abantu abangabaziyo, ukuqala ngemigca emithathu yombhalo efundeka ngolu hlobo "LIBERTY LIBERTY LIBERTY."
Kufuneka kuthiwe emva korhwaphilizo lwamathala eencwadi, UMicrosoft wakunqumamisa ngokukhawuleza ukufikelela kwakho kwi-GitHub kwaye yaphelisa iiprojekthi nge-npm.
Isithethi seGitHub sinike le ngxelo kwizenzo ezithathwe sisikhokelo:
"I-GitHub izibophelele kwimpilo kunye nokhuseleko lobhaliso lwe-npm. Sisusa iipakethe ezikhohlakeleyo kwaye sinqumamise iakhawunti yomsebenzisi ngokuhambelana noMgaqo-nkqubo owaMkelweyo wokuSebenzisa we-npm malunga ne-malware njengoko kubekiwe kwiMigaqo yethu yoMthombo oVulekileyo."
Inkampani ikhuphe ingcebiso yokhuseleko ilandelayo:
“Imibala lithala leencwadi lokubandakanya isicatshulwa esinemibala kwiinode.js consoles. Phakathi kwe-7 kaJanuwari kunye ne-9, 2022, iinguqulelo zemibala 1.4.1, 1.4.2, kunye ne-1.4.44-liberty-2 zakhululwa ezibandakanya ikhowudi ekhohlakeleyo ebangele ukwaliwa kwenkonzo ngenxa ye-loop engapheliyo. Isoftware ebixhomekeke kolu guqulelo namava oonobumba abangaqhelekanga beprintwa kwikhonsoli kunye nelophu engapheliyo ekhokelela kusetyenziso lwesixhobo esinganxulumananga. Abasebenzisi bemibala abaxhomekeke kolu lwakhiwo lukhethekileyo kufuneka batshintshele kwi-1.4.0.
Nangona oku kunokubonakala kwabanye (umphuhlisi utyhale isibophelelo ngekhowudi ekhohlakeleyo kwaye i-GitHub kunye ne-npm yenze njalo into elungileyo ukukhusela abasebenzisi bakho), kuye kwavela iingxoxo malunga namalungelo omphuhlisi wokwenza oku, ngokumalunga nokuba zingaphi iiprojekthi kunye nokuxhomekeka abanako.
“Umngcipheko obangelwa kukuxhomekeka uphezulu ngokuxhomekeka okuncinci okusetyenziswa ngokuqhelekileyo, ngumphuhlisi omnye ongangqiniswanga, ofakwe ngomphathi wepakethe efana ne-npm, i-cargo, i-pypi okanye efanayo. Nangona kunjalo, xa kukho into engahambi kakuhle kweli cala, wonke umntu uqaphela ngokukhawuleza kwaye abantu bacela imali ngokukhawuleza. Nangona kunjalo, ayizizo ezi kuxhomekeka ngokwenene ezigcina uqoqosho lwethu. Uninzi lwezi ziyobisi ziye zaba sisiseko, hayi ngenxa yokuba zisombulula ingxaki enzima, kodwa ngenxa yokuba ngokudibeneyo siqale ukwamkela ubuvila ngaphezu kwayo yonke enye into. Xa sijolisa kwiingxoxo zethu zenkxaso-mali malunga nolu hlobo lokuxhomekeka, siyaziphazamisa ngokupheleleyo kwiiphakheji ezibaluleke ngokwenene. "
Nakuphi na ukunqunyanyiswa kubonakala kungenangqiqo ngokuqwalasela oko ikhowudi kwiindawo zokugcina yeyomdali/umlondolozi wayo. Ewe, ngumthombo ovulekileyo ngengqiqo yokuba unokufoka kwaye ube negalelo kuyo, kodwa ngaba oko kuthetha ukuba i-GitHub inokuthethelela ukwala ilungelo lokuguqula okanye ukutshabalalisa eyakho ikhowudi? Ngaba kukho "inkqubo efanelekileyo" kolu hlobo lwesigqibo?
Eminye imiba ephakanyiswe zezi ziganeko yindlela yokuvuza ngokufanelekileyo abantu ngomsebenzi abawenzileyo kwisoftware yemithombo evulekileyo exhasa enye, isoftware enkulu eyenza ukuba iinkampani ezinkulu zenze inzuzo enkulu.
Kule meko, ezi zilayibrari zeJavaScript zisetyenziswa yi-Amazon Cloud SDK, eyinxalenye ye-AWS.
Nangona color.js kunye faker.js zikonwabele inkxaso ejolise ekuqinisekiseni ukuba uluntu lwemithombo evulekileyo luyahlawulwa ngomsebenzi abawenzayo, kukho uqhagamshelo olukhulu phakathi kwabaphuhlisi abayila kwaye baphumeze iipakethe ezidumileyo ezifana nemibala.js kunye ne-faker. js ukufumana kunye nexabiso layo kwiinkampani eziphinda zisebenzise umsebenzi wazo simahla.
Kodwa, Iakhawunti kaMarak Squires yaphinda yasebenza kwaye wabhala oku:
“Ndiyisusile impazamo ye-zalgo engapheliyo nge-colours.js v2.2.2 kwaye ndilindele ukuva ngenkxaso ye-Github ukuze ndifumane amalungelo am okushicilela e-NPM.
“Kumalungu athembekileyo eCandelo lama-69 leMedia yeNtlalo yezoNyango:
“Enkosi ngeengcinga nangemithandazo yenu.
“Ndingakuqinisekisa ukuba ndisempilweni emzimbeni nasengqondweni. Ndifakela isatifikethi esivela kwiReid Mental Institution, engqina ngaphandle kwamathandabuzo ukuba mna, Marak Squires, andinabo ubuchopho beesile.
Ngaba amalungu eCandelo lama-69 looGqirha bonxibelelwano lweNtlalo banokubonelela ngoxwebhu olungqina ukuba abanabo ubuchopho bedonki?” »
Molo, igama lam ndinguJaime del Valle kwaye ndisebenza kwa-EdTech, siququzelela umsitho wasimahla wokuthetha ngombandela: Isoftware yasimahla: Ifanele ikhululeke kangakanani?
Sithanda ukukumema njengesithethi, umhla wokuvavanywa nguLwesibini, nge-19 ka-Epreli ngo-7pm kwifomathi yedijithali, ungathanda ukuthatha inxaxheba?