<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
  <channel>
    <title>包管理器 on Answer</title>
    <link>https://answer.freetools.me/tags/%E5%8C%85%E7%AE%A1%E7%90%86%E5%99%A8/</link>
    <description>Recent content in 包管理器 on Answer</description>
    <generator>Hugo -- 0.152.2</generator>
    <language>zh-cn</language>
    <lastBuildDate>Sat, 07 Mar 2026 11:32:20 +0800</lastBuildDate>
    <atom:link href="https://answer.freetools.me/tags/%E5%8C%85%E7%AE%A1%E7%90%86%E5%99%A8/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>锁文件的两难困境：为何确定性构建的守护者成了攻击者的捷径</title>
      <link>https://answer.freetools.me/%E9%94%81%E6%96%87%E4%BB%B6%E7%9A%84%E4%B8%A4%E9%9A%BE%E5%9B%B0%E5%A2%83%E4%B8%BA%E4%BD%95%E7%A1%AE%E5%AE%9A%E6%80%A7%E6%9E%84%E5%BB%BA%E7%9A%84%E5%AE%88%E6%8A%A4%E8%80%85%E6%88%90%E4%BA%86%E6%94%BB%E5%87%BB%E8%80%85%E7%9A%84%E6%8D%B7%E5%BE%84/</link>
      <pubDate>Sat, 07 Mar 2026 11:32:20 +0800</pubDate>
      <guid>https://answer.freetools.me/%E9%94%81%E6%96%87%E4%BB%B6%E7%9A%84%E4%B8%A4%E9%9A%BE%E5%9B%B0%E5%A2%83%E4%B8%BA%E4%BD%95%E7%A1%AE%E5%AE%9A%E6%80%A7%E6%9E%84%E5%BB%BA%E7%9A%84%E5%AE%88%E6%8A%A4%E8%80%85%E6%88%90%E4%BA%86%E6%94%BB%E5%87%BB%E8%80%85%E7%9A%84%E6%8D%B7%E5%BE%84/</guid>
      <description>锁文件是确定性构建的基石，但也是供应链攻击的隐形后门。本文深入分析锁文件的设计权衡、安全陷阱和不同包管理器的实现差异，揭示确定性构建背后的复杂性博弈。</description>
    </item>
    <item>
      <title>包管理器的依赖解析为何如此困难：从NP完全问题到SAT求解器的二十年算法博弈</title>
      <link>https://answer.freetools.me/%E5%8C%85%E7%AE%A1%E7%90%86%E5%99%A8%E7%9A%84%E4%BE%9D%E8%B5%96%E8%A7%A3%E6%9E%90%E4%B8%BA%E4%BD%95%E5%A6%82%E6%AD%A4%E5%9B%B0%E9%9A%BE%E4%BB%8Enp%E5%AE%8C%E5%85%A8%E9%97%AE%E9%A2%98%E5%88%B0sat%E6%B1%82%E8%A7%A3%E5%99%A8%E7%9A%84%E4%BA%8C%E5%8D%81%E5%B9%B4%E7%AE%97%E6%B3%95%E5%8D%9A%E5%BC%88/</link>
      <pubDate>Sat, 07 Mar 2026 08:24:13 +0800</pubDate>
      <guid>https://answer.freetools.me/%E5%8C%85%E7%AE%A1%E7%90%86%E5%99%A8%E7%9A%84%E4%BE%9D%E8%B5%96%E8%A7%A3%E6%9E%90%E4%B8%BA%E4%BD%95%E5%A6%82%E6%AD%A4%E5%9B%B0%E9%9A%BE%E4%BB%8Enp%E5%AE%8C%E5%85%A8%E9%97%AE%E9%A2%98%E5%88%B0sat%E6%B1%82%E8%A7%A3%E5%99%A8%E7%9A%84%E4%BA%8C%E5%8D%81%E5%B9%B4%E7%AE%97%E6%B3%95%E5%8D%9A%E5%BC%88/</guid>
      <description>包管理器的依赖解析为何如此困难：从NP完全问题到SAT求解器的二十年算法博弈</description>
    </item>
  </channel>
</rss>
