开源日报第1048期：《PDF Reader in JavaScript》

开源日报每天推荐一个 GitHub 优质开源项目和一篇精选英文科技或编程文章原文，坚持阅读《开源日报》，保持每日学习的好习惯。

2023年12月19日，开源日报第1048期：
今日推荐开源项目：《PDF Reader in JavaScript》
今日推荐英文原文：《Vue 2 is Approaching End Of Life》

今日推荐开源项目：《PDF Reader in JavaScript》传送门：项目链接

PDF.js is community-driven and supported by Mozilla. Our goal is to create a general-purpose, web standards-based platform for parsing and rendering PDFs.

PDF.js是一个用HTML5构建的可移植文档格式（PDF）查看器, 真正引入项目时可先查看官方详细示例

今日推荐英文原文：Vue 2 is Approaching End Of Life

推荐理由：Vue 2 将于 2023 年 12 月 31 日结束生命周期（EOL）,也将不再接收新功能、更新或修复，尽管它仍将在所有现有的分发渠道上可用（CDN、包管理器、Github等）,讲了迁移至Vue 3的一些好处和沿用 Vue 2的办法

Vue 2 is Approaching End Of Life

With 2024 almost upon us, we would like to take this opportunity to remind the Vue community that Vue 2 will reach End of Life (EOL) on December 31st, 2023.

Vue 2.0 was released more than 7 years ago in 2016. It was a major milestone in Vue's journey of becoming a mainstream framework. Many current Vue users started using Vue during the Vue 2 era, and many great things have been built with it.

However, active maintenance of two major versions in parallel isn't sustainable for us. As Vue 3 and its ecosystem have matured, it is time for the team to move on and focus our energy on the latest major version.

What Actually Happens on December 31, 2023?

For the past 18 months since Vue 2.7, Vue 2 has received necessary bug and security fixes, but we stopped shipping new features so we can focus our energy on improving Vue 3.

As we approach this date, the Vue community should prepare for the deprecation of Vue 2. On December 31, we will mark the following packages as deprecated on npm:

• All major and minor versions of Vue 2 core
• vue-router versions exclusively supporting Vue 2 (3.x and below)
• vuex versions exclusively supporting Vue 2 (3.x and below)

After December 31, 2023, Vue 2 will no longer receive new features, updates, or fixes, though it will still be available on all existing distribution channels (CDNs, package managers, Github, etc).

In other words, your applications will continue to work, but you will get deprecation warnings from your package mananger reminding you that Vue 2 is no longer a supported version.

What’s Next

Vue 3 has been the default version of Vue since February 7, 2022. Users who have migrated have enjoyed:

• Better performance with a smaller bundle size and faster rendering.
• Enhanced TypeScript support for easier large-scale application development.
• More efficient Proxy-based reactivity system.
• New built-in components like Fragment, Teleport, and Suspense.
• Improved build tooling support and Vue Devtools experience.
• …and more!

When and if you can, consider migrating!

Still on Vue 2? Here Are Your Options.

Recognizing the various situations that arise during transitions, we are also fully aware that users may need other options until they’re able to migrate, or maybe migration simply isn't a feasible path. Here are some other options to consider.

Update to the Vue 2 Final Release

The to-be-released EOL version (2.7.16) below will be the final release of Vue 2. The planned released date is December 23, 2023. This patch release includes a few final fixes for 2.7 features and improves type alignment with Vue 3. It is currently in beta and we encourage you to try it out and report any possible regressions between this version and 2.7.15.

We strongly encourage you to update to 2.7.16 once it's out. This will be the starting point for extended support mentioned below.

Purchase Extended Support for Vue 2

If you have to stay on Vue 2 post-EOL, we have partnered with HeroDevs to offer Never-Ending Support (NES). Vue 2 NES provides ongoing updates and security patches for Vue 2 even after EOL so that applications with strict compliance requirements remain secure and compliant. It also guarantees that Vue 2 applications will continue to operate effectively in modern browsers and maintain compatibility with essential libraries like Nuxt, Vuex, and Vuetify 2. Finally, Vue 2 NES has continuous security monitoring and a 14-day SLA for fixes.

Vue 2 NES is the continuation of the support you’ve enjoyed during the Vue 2 LTS period — but indefinitely. For more detailed information, visit the HeroDevs Vue 2 NES page.

Notify Your Users of your Vue 2 Post-EOL Plan

If you can’t migrate to Vue 3 or use Vue 2 NES at the moment but still remain on Vue 2, you may need to consider how you will communicate your Vue 2 security plans to your customers.

This does not apply to all Vue users, but many teams are prohibited from shipping unsupported software by SLAs, Contracts & Agreements, or other obligations to downstream parties. These could be with customers, compliance agencies, or even internal company departments. For an increasing number of industries, governing regulatory bodies are also raising expectations on what software creators are accountable for.

If you work with such business requirements, You may need to let your customers, managers, CISO, or other relevant stakeholders, know about your plan to manage support and address any potential CVEs. Vue 2 hasn’t had major vulnerabilities in the past, but CVEs do turn up for even the most mature EOL projects — whether directly or via compromised dependencies. Subscribing to CVE notifications through organizations like OpenCVE and Snyk can be a good way to find out about vulnerabilities as soon as they’re discovered. Browsers may also ship changes that break legacy libraries - this is rare, but it does happen.

Looking Forward

It will be an emotional moment for me when Vue 2 finally reaches EOL, but at the same time I am more excited than ever about the future ahead of us. The Vue 3 ecosystem has been thriving with innovation. Vue 3.4 is currently in beta with performance improvements for both the compiler and runtime. We are also making good progress on Vapor Mode. The end of Vue 2 only marks a new beginning - 2024 will be an exciting year for Vue!

下载开源日报APP：https://openingsource.org/2579/
加入我们：https://openingsource.org/about/join/
关注我们：https://openingsource.org/about/love/