問題文
A team has pulled a widely used open-source library into a public service. A colleague argues that the library is safer than a closed component because many volunteers have read the code. What does the reuse actually change, and what does it add to the work of the engineer?
選択肢
- Reuse of this library changes the attack surface because unknown parties add backdoors, and the additional task it hands the engineer is the code review for vulnerabilities.
- Reuse of this library changes the release cadence because numerous volunteers audit code, and the additional task it hands the engineer is the vendor wait for vulnerabilities.
- Reuse of this library changes the license exposure because distribution terms forbid changes, and the additional task it hands the engineer is the contract change for vulnerabilities.
- Reuse of this library changes the staffing budget because community members fix defects, and the additional task it hands the engineer is the schedule reduction for vulnerabilities.