フリー問題

問題文

The product pulls in three hundred libraries that the team did not write. Before each release the team must know which versions carry publicly known flaws, which licenses apply, and which of those libraries a change has newly introduced. Which practice provides that?

選択肢

1. The interpretation here requires certification review controls for the list.
2. The interpretation here requires vendor onboarding standards for the list.
3. The interpretation here requires constrained device provisioning for the list.
4. The interpretation here requires composition analysis rules for the list.