<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>安全 on 建造十年</title><link>https://builderdecade.com/zh/tags/%E5%AE%89%E5%85%A8/</link><description>Recent content in 安全 on 建造十年</description><generator>Hugo</generator><language>zh</language><lastBuildDate>Wed, 02 Sep 2026 08:00:00 +0800</lastBuildDate><atom:link href="https://builderdecade.com/zh/tags/%E5%AE%89%E5%85%A8/index.xml" rel="self" type="application/rss+xml"/><item><title>何時該信任一個開源套件：獨立開發者的盡職調查守則</title><link>https://builderdecade.com/zh/posts/open-source-dependency/</link><pubDate>Wed, 02 Sep 2026 09:00:00 +0800</pubDate><guid>https://builderdecade.com/zh/posts/open-source-dependency/</guid><description>「免費又很多人用」正是獨立開發者繼承別人拋棄的專案——或竊取憑證的蠕蟲——的方式。這裡是五項檢查清單，讓你按下 npm install 之前，用三十分鐘跑完。</description></item></channel></rss>