Skip to main content

Posts

SD Times Open-Source Project of the Week: React Spectrum

This week Adobe introduced a new open-source project designed to help developers build great user experiences. React Spectrum is a collection of libraries and tools that focus on adaptive, accessible and robust user experiences.  The project currently includes three libraries: React Spectrum, which is an implementation of Adobe’s design system React Aria, a library of React Hooks for accessible UI primitives React Stately, a collection of cross-platform state management and core logic Other features include accessibility and behavior implementations such as full screen reader and keyboard navigation support; adaptive components with the ability to work with mouse, touch and keyboard interactions; support for more than 30 international languages; and support for custom themes.  According to Adobe, one of the main goals of the project is to make it as easy as possible to build design systems and component libraries while still maintaining “high quality interactions and accessib

SD Times news digest: Tasktop Jira Align Connector, SQL Server Management Studio 18.6, and Adobe, IBM and Red Hat’s digital transformation partnership

The release of Tasktop Hub 20.3 includes the ability to integrate Jira Align as well as new UX features. Jira Align is also supported by Tasktop Viz, where enterprises get insight into the flow of business value, starting from strategic planning in Jira Align and all through the implementation by individual value streams working in other tools. Additionally, settings were consolidated onto a single page, there’s a new icon decorating the Field Mapping and Field Flow screens. “This new integration provides more visibility into flow and optimization opportunities at the early stages of idea elaboration and planning,” said Nicole Bryan, chief product officer at Tasktop. “Flow metrics and diagnostics on the work done in Jira Align and its subsequent breakdown in other tools can help shine a light on activity at the top of the funnel and help organizations progress their shift from project to product.” More details on the new release are available here . SQL Server Management Studio 1

Facebook researchers develop Transcoder for migrating legacy codebases

Facebook has developed a new neural transcompiler system, Transcoder, to make it easier to migrate codebases to other languages.  Transcoder uses self-supervised training, which Facebook explained is important for translating between programming languages. According to the company, traditional supervised-learning approaches are dependent on large-scale parallel data sets for the languages, but these don’t exist for all languages. For example, there aren’t any parallel data sets from COBOL to C++ or C++ to Python.  Transcoder’s approach only requires source code for one of the languages. It also doesn’t require knowledge of the languages. Facebook believes Transcoder will be useful for updating legacy codebases. It is also an example of how neural machine translation techniques can be applied to new areas. Transcoder was developed by researchers Marie-Anne Lachaux, Baptiste Roziere, Lowik Chanussot, and Guillaume Lample. More information on the tool is available in this post .   “

Apple launches Security Research Device Program

Apple launched the Security Research Device (SRD) Program this week to help improve security for iOS users and to bring more researchers to the iPhone.  It features an iPhone dedicated exclusively to security research, with unique code execution and containment policies. According to Apple, it is not meant for personal use or daily carry, and must remain on the premises of program participants at all times and usage must be authorized by Apple.  Users who find any vulnerabilities through a SRD must promptly report it to Apple or to an appropriate third party if the code belongs to them.  Those who find one outside of an SRD are encouraged to share it through the Apple Security Bounty, which is offering rewards. Meanwhile, vulnerabilities found with an SRD are automatically considered for reward through the Apple Security Bounty. When a report for a vulnerability is issued, Apple will provide a publication date in which it will resolve the issue.  To be eligible for the Security Dev

Dart updates pub.dev site with new scoring metrics for packages

Dart has announced it is launching a new version of its pub.dev site for finding packages. The new site provides scoring metrics to help developers find potential useful packages.  According to Dart, 7,000 packages were published in the past year. The new scoring system takes into account three metrics:  How many likes a package has received Pub points, which includes quality dimensions like code style, platform support, and maintainability How many developers have used the package The team explained that the goal of pub points is to “provide a close approximation of measurable, objective quality.” They added that this is a difficult task because developers perceive quality in a number of different ways.  Previously, the scoring model subtracted points for issues. This new model instead issues points for traits in five categories: following Dart file conventions, providing documentation, supporting multiple platforms, passing static analysis, and supporting up-to-date depende

SD Times news digest: GrammaTech acquires JuliaSoft, Snyk announces prioritization capabilities, and TigerGraph makes updates to GSQL

Software assurance and cybersecurity company GrammaTech announced it will be acquiring code analysis company JuliaSoft. According to GrammaTech, the acquisition will help it expand the reach of the CodeSonar SAST platform to Java and C#. The new language support extends the automated detection of software vulnerabilities to enterprise use cases where safety and security are indispensable.  The CodeSonar platform supports both Desktop and DevSecOps workflows and provides enterprise features such as reliable tracking of defects independent of code changes, extensive code visualization capabilities, and supports popular IDEs, command-line and web interfaces. Additional details are available here . Snyk announces new prioritization capabilities The new capabilities give security and development teams automated visibility and remediation insight for the open source and container vulnerabilities that pose the greatest risk, according to the company. It offers instant prioritization th

Breaking silos in Continuous Integration and Continuous Delivery

Last year’s Gartner’s DevOps Hype Cycle states that DevOps Toolchain Orchestration is moving from the peak of inflated expectations to the trough of disillusionment . This means the market is moving at a fast pace towards actual productivity and scalability . We understand that we need to build a comprehensive strategy to address DevOps at scale, where continuous integration and continuous delivery (CI/CD) is core to effectiveness. In this model, everyone gets what they want: security and control for operators, freedom and speed for developers. As we tread towards the DevOps slope of enlightenment and the plateau of productivity, we have to choose between a few approaches to DevOps and make some critical decisions to ensure effectiveness.  Below are some foundational questions to consider, along with recommendations based on our experiences with customers and the current state of DevOps. SD Times: Should I approach CI and CD separately? Rob Zuber, CTO of CircleCI : When it

SD Times news digest: Instana GitOps-enabled agent, .NET 5.0 Preview 7, and Linux Foundation announces the Advanced Cloud Engineer Bootcamp

Instana is adding a new GitOps enabled agent to its application performance management solution.  According to the company, the Instana agent automatically supports Git-based configuration management to streamline configuration rollouts across multiple hosts. “With this latest unique capability, Instana is giving more control to users while reducing manual effort, enabling them to manage agent configuration automatically during agent startup and reboot, and version pin the Instana agent to via their Git repository of preference,” said Chris Farrell, Instana technical director and APM strategist. Instana’s automated APM solution discovers all application service components and application infrastructure, including cloud infrastructure such as AWS and Lambda, orchestration infrastructure like Kubernetes and Docker, application services and DevOps processes, thhe .  .NET 5.0 Preview 7 New features in this release include the ability to ignore default values for value-type properties

It’s critical to keep your open-source components up to date and secure

The recently released 2020 Open Source Security and Risk Analysis (OSSRA) report, produced by the Synopsys Cybersecurity Research Center (CyRC), found that of more than 1,250 codebases analyzed in 2019, not only did virtually 100% have some open-source components, but also that an average of 70% of the code was open source, nearly double the 36% found by the first OSSRA report. Another measure of the dramatic increase in open source use is that the OSSRA found an average of 445 open-source components per codebase in 2019, up nearly 50% from 298 just a year earlier. What open-source software provides to developers is a foundation that makes application development faster, more efficient and cheaper. It’s why the majority of software products today are “assembled” from existing components rather than written from scratch. If your organization builds or simply uses software, you can assume that software will contain open source. If you’re a member of a security team, and don’t have

Apache Cassandra 4.0 beta now available

The Apache Software Foundation (ASF) has released a beta for Apache Cassandra 4.0.  According to the ASF, contributors have made over 1,000 bug fixes, improvements, and new features for version 4.0. The ASF has stated that no additional features will be added to future beta releases or the GA release of Apache Cassandra 4.0. “You can expect the time you put into the beta to translate into transitioning your production workloads to 4.0 in the near future,” the ASF wrote in a post . Several companies have made software, hardware, and QA testing donations to this release, including Instaclustr, iland, Amazon, and Datastax. “This release has seen an unprecedented cross-industry collaboration towards releasing a battle-tested database with enterprise security features and an understanding of what it takes to deliver scale in the cloud,” the ASF wrote. New features include: 5x faster scaling operations Enterprise-grade security and observability, including  A new audit logging featu

SD Times news digest: Applitools’ auto-maintenance AI , Vercel updates edge and dev infrastructure, and new G Suite security features

Applitools added AI auto-maintenance and smart assist to its end-to-end platform.  AI powered smart assist automatically analyzes large batches of test results, often numbering in the hundreds or even thousands of tests. It then removes any redundancies by grouping similar visual and functional regressions together.  “Test maintenance is a painstaking and error-prone task, which is exactly what AI is meant to solve,” said Adam Carmi, the CTO of Applitools. “Applitools’ core Visual AI technology helps automate test maintenance processes and does most of the heavy lifting to save test engineers and developers time while reducing errors.” Vercel updates edge and dev infrastructure Vercel announced a new real-time developer workflow with Next.js and Vercel CLI and finishing with serving pages up to 6 times faster. With the new Fast Refresh capability changes to complex UIs and components are reflected in a matter of milliseconds, up to 10x-20x faster than other React frameworks. “A g

SD Times news digest: Perforce Software acquires Methodics, Android basics in Kotlin, and TileDB’s round of funding

Perforce Software announced that it acquired Methodics, a provider of intellectual property life cycle management and traceability solutions for enterprises. Perforce explained the acquisition will help it expand its DevOps portfolio. “The semiconductor and embedded software design markets continue to expand, especially as they serve growing AI, automotive, cloud, and IoT markets,” said Mark Ties, the CEO of Perforce. “Together with Methodics, Perforce will enable these markets to drive faster time to market, higher quality, greater operational efficiency, and increased security and compliance at scale. Android Basics in Kotlin Android Basics in Kotlin is a new online course for people without programming experience to learn how to build Android apps. “The goal is to expose you to the tools and resources that professional Android developers use. With hands-on practice, you learn the fundamentals of programming. By the end of the course, you will have completed a collection of Andro

How to Check Python Version in Windows, Linux and Mac Pratik Sah The Crazy Programmer

This post is all about how to check Python version on your computer. But before getting started, let’s know a bit about Python. Python is one of the most popular programming languages. And due to its awesome developer community, you can easily see a lot of different versions getting released quite frequently. There are two most popular versions of Python as of now, one is Python 2.7.x and the other is Python 3.8.x . Sometimes you have to work with python library that only supports Python 2.7 and sometimes we have to work with Python 3.x version but we have Python 2.7 installed and we may find our library not supporting the installed version of python. In that case, it’s best to check the version of Python installed before downloading the required library. In this tutorial, we will see how to check the python version on Windows, Linux and macOS just with the help of terminal. Now, before getting started, you should be able to access your command-line of your OS. Note : This pos

SD Times news digest: Visual Studio 2019 16.6 support for C++20 Ranges, WinUI 3 preview 2, and Rust 1.45 released

Visual Studio 2019 version 16.6 contains the first user-visible pieces of C++20 Ranges support, according to Microsoft.  The standard library concepts in ‘<concepts>’ have been shipping in MSVC since version 16.3. This includes the customization point ‘std::ranges::swap.’ Also available are the first batch of Range algorithms in ‘<algorithm>.’ Additional details are available here . WinUI 3 preview 2 WinUI 3 Preview 2 builds directly on Preview 1 by fixing quite a few critical and serious bugs that didn’t make the cut in time for the company’s release at Build 2020 two months ago. In the new release, INotifyCollectionChangedand INotifyPropertyChanged are now working in C# Desktop apps and WinUI 3 Preview 2 is now compatible with .NET 5 Preview 5 for Desktop apps.  It also includes crash fixes for Input Validation and other text scenarios. Additional details on all of the changes are available here . Rust 1.45 released The two big changes in Rust 1.45.0 include a f

SD Times Open-Source Project of the Week: Swift Service Lifecycle

The Swift programming language team has announced a new open-source Swift server ecosystem project. Swift Service Lifecycle is designed to free up resources before exiting an application. “Most services have startup and shutdown workflow-logic which is often sensitive to failure and hard to get right. Startup sequences include actions like initializing thread pools, running data migrations, warming up caches, and other forms of state initialization before taking traffic or accepting events. Shutdown sequences include freeing up resources that hold on to file descriptors or other system resources that may leak if not cleared correctly,” Tom Doron, member of the Swift Core team and Swift Server work group, wrote in a post . In order to help server apps and frameworks address their own needs, the project provides a safe, reusable, framework-agnostic way of cleanly starting up and shutting down an app. To get started, the team recommends creating a ServiceLifecycle instance and regis