Open Source and Trust

IEEE Security & Privacy（2022）

引用 0|浏览11

暂无评分

摘要

Of late, two major incidents involving open source software have been in the news. The more serious involved a Java logging package called “log4j”; the other involved a pair of JavaScript packages, “colors.js” and “faker.js”. The incidents were very different, but there are some commonalities and some important distinctions in the lessons we should learn.

查看译文

AI 理解论文

溯源树

样例

生成溯源树，研究论文发展脉络

Chat Paper

正在生成论文摘要