{"pageContext":{"index":200,"total":364,"name":"2023-03-05","items":[{"node":{"frontmatter":{"title":"2023 网站生成器review","publish":true,"cover":"","showCover":null,"date":"2023-03-05","category":"nodejs","url":"https://www.zachleat.com/web/site-generator-review/","author":"ZACH LEATHERMAN","translator":"","tags":["site generator"],"priority":1},"html":""}},{"node":{"frontmatter":{"title":"Node.js VM 沙箱也并不安全","publish":true,"cover":"","showCover":null,"date":"2023-03-05","category":"nodejs","url":"https://snyk.io/blog/security-concerns-javascript-sandbox-node-js-vm-module/","author":"Liran Tal","translator":"","tags":["vm"],"priority":1},"html":"<div class=\"gatsby-highlight\" data-language=\"javascript\"><pre class=\"language-javascript\"><code class=\"language-javascript\"><span class=\"token keyword\">const</span> vm <span class=\"token operator\">=</span> <span class=\"token function\">require</span><span class=\"token punctuation\">(</span><span class=\"token string\">\"node:vm\"</span><span class=\"token punctuation\">)</span><span class=\"token punctuation\">;</span>\n\n<span class=\"token keyword\">const</span> userInputCustomJavaScriptCode <span class=\"token operator\">=</span>\n  <span class=\"token string\">\"this.constructor.constructor('console.log(process.env)')()\"</span><span class=\"token punctuation\">;</span>\n\n<span class=\"token keyword\">const</span> context <span class=\"token operator\">=</span> <span class=\"token punctuation\">{</span> userCustomNickname<span class=\"token punctuation\">:</span> <span class=\"token string\">\"John Nash\"</span> <span class=\"token punctuation\">}</span><span class=\"token punctuation\">;</span>\nvm<span class=\"token punctuation\">.</span><span class=\"token function\">createContext</span><span class=\"token punctuation\">(</span>context<span class=\"token punctuation\">)</span><span class=\"token punctuation\">;</span>\n\nvm<span class=\"token punctuation\">.</span><span class=\"token function\">runInContext</span><span class=\"token punctuation\">(</span>userInputCustomJavaScriptCode<span class=\"token punctuation\">,</span> context<span class=\"token punctuation\">)</span><span class=\"token punctuation\">;</span>\n\nconsole<span class=\"token punctuation\">.</span><span class=\"token function\">log</span><span class=\"token punctuation\">(</span><span class=\"token string\">\"宿主全部环境变量都暴露了\"</span><span class=\"token punctuation\">)</span><span class=\"token punctuation\">;</span></code></pre></div>"}},{"node":{"frontmatter":{"title":"lenis - 滚动交互组件","publish":true,"cover":"https://camo.githubusercontent.com/0f58684d4159e14af97e0869bbc665fba902a173b1a0b1d6c83408ed49742ac7/68747470733a2f2f6173736574732e73747564696f667265696768742e636f6d2f6c656e69732f6865616465722e706e67","showCover":null,"date":"2023-03-05","category":"frontend","url":"https://github.com/studio-freight/lenis","author":"Studio Freigh","translator":"","tags":["scroll"],"priority":1},"html":""}},{"node":{"frontmatter":{"title":"UVM - 设计用于运行独立应用程序的简约虚拟机","publish":true,"cover":"","showCover":null,"date":"2023-03-05","category":"devops","url":"https://github.com/maximecb/uvm","author":"Maxime Chevalier-Boisvert","translator":"","tags":["vm"],"priority":1},"html":""}},{"node":{"frontmatter":{"title":"OpenAI 现在成为它所承诺的反面 - 商业,闭源和营利","publish":true,"cover":"","showCover":null,"date":"2023-03-05","category":"javascript","url":"https://www.vice.com/en/article/5d3naz/openai-is-now-everything-it-promised-not-to-be-corporate-closed-source-and-for-profit","author":"Chloe Xiang","translator":"","tags":["audit"],"priority":1},"html":""}},{"node":{"frontmatter":{"title":"memos - 具有知识管理和社交网络的开源自托管备忘录","publish":true,"cover":"","showCover":null,"date":"2023-03-05","category":"nodejs","url":"https://github.com/usememos/memos/raw/main/resources/demo.webp#gh-light-mode-only","author":"usememos","translator":"","tags":["markdown"],"priority":1},"html":""}},{"node":{"frontmatter":{"title":"React Flow开源项目收费的经验","publish":true,"cover":"https://reactflow.dev/img/blog/oss-pricing/pricing-ui.png","showCover":null,"date":"2023-03-05","category":"opensource","url":"https://reactflow.dev/blog/asking-for-money-for-open-source/","author":"John Robb","translator":"","tags":["pay"],"priority":1},"html":"<p>就是借鉴saas的模式,而且需要一种开源策略例如<a href=\"https://www.bcg.com/publications/2021/open-source-software-strategy-benefits\">Thin-Crust Open Core</a></p>"}},{"node":{"frontmatter":{"title":"nodejs toolbox - 一种查找 Node.js 包的新方法","publish":true,"cover":"","showCover":null,"date":"2023-03-05","category":"nodejs","url":"https://nodejstoolbox.com/","author":"nodejstoolbox.com","translator":"","tags":["toolbox"],"priority":1},"html":""}},{"node":{"frontmatter":{"title":"react-qrcode-logo - 可定制颜色和图片的二维码组件","publish":true,"cover":"https://github.com/gcoro/react-qrcode-logo/raw/master/res/qrcode-mikuv3.png","showCover":null,"date":"2023-03-05","category":"frontend","url":"https://github.com/gcoro/react-qrcode-logo","author":"Giulia Corò","translator":"","tags":["react"],"priority":2},"html":""}},{"node":{"frontmatter":{"title":"remult - CRUD Rest API全栈框架","publish":true,"cover":"https://github.com/remult/remult/raw/master/static/images/video-thumbnail.jpg","showCover":null,"date":"2023-03-05","category":"nodejs","url":"https://github.com/remult/remult","author":"remult","translator":"","tags":["fullstack"],"priority":1},"html":""}},{"node":{"frontmatter":{"title":"sandworm-audit - 应用程序依赖项的安全和许可合规性审计","publish":true,"cover":"https://camo.githubusercontent.com/50f8594d5b8e88fa09908cb9b85a9e4c4657f6a87175b3e9f28c57418aad3570/68747470733a2f2f6173736574732e73616e64776f726d2e6465762f73686f77636173652f747265656d61702d616e642d747265652e706e67","showCover":null,"date":"2023-03-05","category":"javascript","url":"https://github.com/sandworm-hq/sandworm-audit","author":"Sandworm","translator":"","tags":["audit"],"priority":2},"html":""}},{"node":{"frontmatter":{"title":"大多数数据工作似乎根本没有价值","publish":true,"cover":"","showCover":null,"date":"2023-03-05","category":"AI","url":"https://ludic.mataroa.blog/blog/most-data-work-seems-fundamentally-worthless","author":"Ludicity","translator":"","tags":["big data"],"priority":1},"html":"<blockquote>\n<p>薪酬高，工作清闲(cushy)，却发出这样的感概，貌似凡尔赛，但看出作者确实是有追求的吧</p>\n</blockquote>"}},{"node":{"frontmatter":{"title":"尝试使用deno实现安全沙箱","publish":true,"cover":"https://healeycodes.com/_next/image?url=%2Fposts%2Fsandboxing-javascript-code%2Fdeno-script-arch.png&w=1920&q=100","showCover":null,"date":"2023-03-05","category":"nodejs","url":"https://healeycodes.com/sandboxing-javascript-code","author":"Andrew Healey","translator":"","tags":["sandbox"],"priority":2},"html":""}},{"node":{"frontmatter":{"title":"scrolly-video - 滚动交互播放的视频组件","publish":true,"cover":"","showCover":null,"date":"2023-03-05","category":"frontend","url":"https://github.com/dkaoster/scrolly-video","author":"Daniel Kao","translator":"","tags":["react"],"priority":1},"html":""}},{"node":{"frontmatter":{"title":"我在Stripe工作学到的东西","publish":true,"cover":"","showCover":null,"date":"2023-03-05","category":"career","url":"https://steinkamp.us/post/2022/11/10/what-i-learned-at-stripe.html","author":"Zack Steinkamp","translator":"","tags":["audit"],"priority":1},"html":"<ul>\n<li>使团队中的感激之情正常化，并为认可那一周帮助过你的人设定了温和的期望。</li>\n<li>团队中的每个任务和项目都有一个人负责当时的事情——直接负责人，或 DRI</li>\n<li>为增长、多元化和情商而招聘</li>\n<li>项目从编写（而不是发送！）Shipped 电子邮件开始的情况并不少见，作为理解项目范围和目标的指南针</li>\n<li>从最终用户那里征求直接反馈的做法一直渗透到 Stripe 的每个角落。</li>\n<li>使用Monorepos</li>\n<li>远程开发环境用起来不错</li>\n<li>对开发工具的大量投资回报丰厚</li>\n</ul>"}},{"node":{"frontmatter":{"title":"研究发现，美国玉米乙醇对气候的影响比汽油更严重","publish":true,"cover":"https://www.reuters.com/resizer/E4aQp4H7z7raRigIihZb75zr6zY=/1200x0/filters:quality(80)/cloudfront-us-east-2.images.arcpublishing.com/reuters/X5IYEMETKVP2BCANL2O7HMVFKY.jpg","showCover":null,"date":"2023-03-05","category":"other","url":"https://www.reuters.com/business/environment/us-corn-based-ethanol-worse-climate-than-gasoline-study-finds-2022-02-14","author":"Leah Douglas","translator":"","tags":["climate"],"priority":2},"html":"<p>该研究部分由国家野生动物联合会和美国资助。发现乙醇的碳强度可能至少比汽油高 24%，这是由于土地利用变化种植玉米以及加工和燃烧造成的排放。</p>"}},{"node":{"frontmatter":{"title":"诺基亚推出可在家自己维修的 Android 手机G22","publish":true,"cover":"https://i.guim.co.uk/img/media/0dbf1ee9c1b8ed2536bef8d5f82bac9704bebbf1/1003_574_5352_3211/master/5352.jpg?width=620&quality=45&dpr=2&s=none","showCover":null,"date":"2023-03-05","category":"mobile","url":"https://www.theguardian.com/technology/2023/feb/25/nokia-launches-diy-repairable-budget-android-phone","author":"theguardian.com","translator":"","tags":["android"],"priority":1},"html":""}}]}}