Shulou(Shulou.com)11/24 Report--

CTOnews.com, August 1 news, the internal disputes of the Rust project were relatively violent, and the audit team resigned collectively in order to protest against the core team, while the core team itself was too busy because of numerous affairs, reflecting that the project itself is the extension of the software development cycle, and the increase in Bug, including vulnerability tracking, project ecological security and other basic operation and maintenance work, has also been seriously affected.

The Rust project recently set up a new leadership committee, which is focusing on improving the "ecological security of the project" affected by many governance disturbances. They recently released their first "security plan report," detailing the recent security priority areas involved in the Rust project, the milestones achieved, and the plans to be launched in the future.

According to the ▲ Touyuan Rust Foundation, the Rust Foundation's security plan, which was originally created in September 2022, is currently supported by OpenSSF's Alpha-Omega project and Rust Foundation platinum members to "support and strengthen the security state within the Rust programming language ecosystem."

From the report released by the Rust project, CTOnews.com summarizes the current achievements of the Rust project team as follows:

Significant progress has been made in the complete security audit of the Rust ecosystem

Complete the creation of multiple threat models so that the Rust Foundation and Rust projects can better understand the risks that may exist in the security audit process

A variety of process optimization tools have been developed to enhance the security workflow of Rust maintainers while enabling them to have a deeper understanding of the causes of vulnerabilities.

Improved API token while reducing crates.io technology debt

Rebecca Rumbul, Executive Director and Chief Executive Officer of ▲ Tuyuan Rust Foundation Rust Foundation, said after the release of the "Security Plan report":

I am pleased to share the first Security Initiative report from the Rust Foundation, which details the achievements of the Rust project from December 2022 to July 2023. The collaboration between teams around the Rust project brings a lot of new room for development and helps to build a more secure ecosystem of Rust programming languages.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.