{"type":"link","version":"1.0","title":"作者分享在 Ruby… · Dependencies should be… | HotDaily","description":"作者分享在 Ruby 项目中因依赖包发布步骤缺乏透明度导致审计困难的经历。Go 依赖通过 URL 直接从 VCS（如 Git）拉取源码、同时作为…","url":"https://hotdaily.top/item/9c22c5aa-4f10-41e5-8fc2-460cd6c1a3e1","provider_name":"HotDaily","provider_url":"https://hotdaily.top","thumbnail_url":"https://hotdaily.top/og.png","thumbnail_width":1200,"thumbnail_height":630}