![Maven Central Adds Sigstore Signature Validation](https://cdn.sanity.io/images/cgdhsj6q/production/7da3bc8a946cfb5df15d7fcf49767faedc72b483-1024x1024.webp?w=400&fit=max&auto=format)
Security News
Maven Central Adds Sigstore Signature Validation
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
github.com/jwhisper/custom-layout
https://github.com/golang-standards/project-layout
proto文件,hook到一个统一的api仓库 https://www.bookstack.cn/read/API-design-guide/API-design-guide-README.md
FieldMask, 增量更新
使用pb产生可传递,可自定义的grpcerrors service error --> grpc errors --> service error(插件)
程序启动,注销,初始化 一个app可以分4种:
仅在该项目使用,无法被其他项目导入
service DTO api ----> service(类似DDD的application) service服务的编排,组合,实现DTO->DO
biz DTO service ----> biz(类似DDD的domain) biz实现具体业务逻辑,聚合服务 定义DO,贫血模型 定义do的repo接口, 使用依赖注入data层的具体实现
data
实现上层biz定义的具体的持久化方法; 与dao比,更偏向于业务
4. dao
定义PO,实现DTO->PO
https://github.com/facebook/ent
配置文件pb和配置初始化options要解耦
自动回滚
Google软件测试之道
使用docker的染色测试,面向用户的大中型测试,kit的小型单元测试 Subtests + Gomock
errgroups wires https://github.com/go-kratos/kratos/blob/v2/app.go
可选参数
https://github.com/protocolbuffers/protobuf/blob/master/src/google/protobuf/wrappers.proto 可选类型 Warpper 类型的字段,即包装一个 message,使用时变为指针。
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
Security News
CISOs are racing to adopt AI for cybersecurity, but hurdles in budgets and governance may leave some falling behind in the fight against cyber threats.
Research
Security News
Socket researchers uncovered a backdoored typosquat of BoltDB in the Go ecosystem, exploiting Go Module Proxy caching to persist undetected for years.