[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"blog-post-open-source-license-risk-zh-CN":3,"blog-related-open-source-license-risk-zh-CN":29,"blog-adjacent-open-source-license-risk-zh-CN":62},{"id":4,"slug":5,"title":6,"excerpt":7,"content":8,"cover":9,"tone":10,"author":11,"publishedAt":12,"updatedAt":12,"readingMinutes":13,"featured":14,"tags":15,"category":19,"seoSettings":28},119,"open-source-license-risk","开源协议风险：企业在用，但并不了解","几乎每个项目都会用到开源组件，但很少有人说得清它们的协议义务。","\u003Cp>我们评审过一些企业的项目，抽查依赖清单发现：有企业在商业产品里用了 GPL 协议的组件，还有企业使用的开源库已经三年没有维护。开源节省了开发成本，也带来了被忽视的义务。\u003C\u002Fp>\n\u003Ch2>常见的几类风险\u003C\u002Fh2>\n\u003Cp>传染性协议。GPL\u002FAGPL 类协议要求衍生作品也以相同协议开源，用在闭源商业产品里可能构成违约。\u003C\u002Fp>\n\u003Cp>维护停滞。依赖的库长期无人维护，安全漏洞不再修复，升级路径断裂。\u003C\u002Fp>\n\u003Cp>来源不明。从论坛或网盘下载的代码片段，没有明确授权信息，风险无法评估。\u003C\u002Fp>\n\u003Ch2>能做的几件事\u003C\u002Fh2>\n\u003Cp>建立依赖清单，扫描工具自动生成，每次发版更新，标注每个依赖的协议类型。\u003C\u002Fp>\n\u003Cp>明确红线：AGPL 组件不得进入核心业务代码；不明确授权的代码一律不用。\u003C\u002Fp>\n\u003Cp>对关键依赖做年检：近期提交频率、已知漏洞、是否有可替代方案。\u003C\u002Fp>\n\u003Cp>开源不是免费午餐，而是有条件的共享。把协议义务当成合同条款对待，用起来才踏实。\u003C\u002Fp>","","cyan","佳益方圆团队","2026-05-30T12:23:00+08:00",1,false,[16,17,18],"行业观察","开源","合规",{"id":20,"parentId":21,"slug":22,"name":16,"description":23,"icon":24,"cover":9,"tone":25,"kind":26,"sortOrder":27,"count":21},5,0,"industry-watch","对互联网、软件与数字化行业趋势的深度分析，输出团队自己的判断。","globe","blue","article",20,{},[30,41,51],{"id":31,"slug":32,"title":33,"excerpt":34,"content":9,"cover":9,"tone":35,"author":11,"publishedAt":36,"updatedAt":36,"readingMinutes":13,"featured":14,"tags":37,"category":40},108,"gansu-manufacturing-digitalization","甘肃制造业数字化的三个观察","跑了十几家本地制造企业之后，我们看到数字化不再是买软件，而是补基础。","slate","2026-10-09T09:00:00+08:00",[16,38,39],"制造业","数字化",{"id":20,"parentId":21,"slug":22,"name":16,"description":23,"icon":24,"cover":9,"tone":25,"kind":26,"sortOrder":27,"count":21},{"id":42,"slug":43,"title":44,"excerpt":45,"content":9,"cover":9,"tone":25,"author":11,"publishedAt":46,"updatedAt":46,"readingMinutes":13,"featured":14,"tags":47,"category":50},109,"local-software-budget","本地软件预算的两个新趋势","预算总额没有明显增长，但花钱的方式变了：更少的一次性大项目，更多的持续性投入。","2026-09-27T10:13:00+08:00",[16,48,49],"预算","信息化",{"id":20,"parentId":21,"slug":22,"name":16,"description":23,"icon":24,"cover":9,"tone":25,"kind":26,"sortOrder":27,"count":21},{"id":52,"slug":53,"title":54,"excerpt":55,"content":9,"cover":9,"tone":10,"author":11,"publishedAt":56,"updatedAt":57,"readingMinutes":13,"featured":14,"tags":58,"category":61},4,"cross-border-first-90-days","品牌出海的前 90 天：独立站、支付与履约","有一个英文网站只是开始。真正决定出海成败的，是站点之外的支付、合规与交付体验。","2026-09-18T10:30:00+08:00","2026-10-18T15:58:14.692+08:00",[59,60],"品牌出海","跨境电商",{"id":20,"parentId":21,"slug":22,"name":16,"description":23,"icon":24,"cover":9,"tone":25,"kind":26,"sortOrder":27,"count":21},{"previous":63,"next":79},{"id":64,"slug":65,"title":66,"excerpt":67,"content":9,"cover":9,"tone":10,"author":11,"publishedAt":68,"updatedAt":68,"readingMinutes":13,"featured":14,"tags":69,"category":73},100,"facilitating-retrospectives","复盘会的主持技巧","一次好的复盘会，主持人说得少，问题问得准。","2026-06-01T12:23:00+08:00",[70,71,72],"团队文化","复盘","会议",{"id":52,"parentId":21,"slug":74,"name":75,"description":76,"icon":77,"cover":9,"tone":25,"kind":26,"sortOrder":78,"count":21},"team-culture","团队动态","公司活动、技术分享、团建与招聘文化，了解佳益方圆团队的日常。","users",30,{"id":80,"slug":81,"title":82,"excerpt":83,"content":9,"cover":9,"tone":10,"author":11,"publishedAt":84,"updatedAt":84,"readingMinutes":13,"featured":14,"tags":85,"category":86},21,"seven-years-what-changed","七年，我们改变了什么","从三个人到二十人，从什么单都接到知道自己擅长什么，变化比想象中慢，也比想象中扎实。","2026-05-28T12:23:00+08:00",[],{"id":87,"parentId":21,"slug":88,"name":89,"description":90,"icon":91,"cover":9,"tone":25,"kind":26,"sortOrder":92,"count":21},6,"founder-notes","创业手记","创始团队在经营、管理与产品上的思考，记录一家软件公司的成长过程。","pen-tool",10]