遵循以下最佳实践的项目将能够自愿的自我认证,并显示他们已经实现了核心基础设施计划(OpenSSF)徽章。 显示详细资料
[](https://www.bestpractices.dev/projects/960)
<a href="https://www.bestpractices.dev/projects/960"><img src="https://www.bestpractices.dev/projects/960/badge"></a>
Iroha is a simple and straightforward DLT platform for asset and identity management. It has client libraries for mobile and web application development; novel consensus, called YAC, and SQL-powered validation.
Analysis over "dev" branch on December 4 2018: (this tool was used — https://github.com/aserg-ufmg/Truck-Factor/tree/master/gittruckfactor)
2018-12-04 15:34:40 INFO hyperledger/iroha: Extracting and calculating authorship information... 2018-12-04 15:34:40 WARN DOACalculator:92 - No commits for test/module/irohad/ametsuchi/tx_presence_cache_stub.hpp TF = 7 (coverage = 46,18%) TF authors (Developer;Files;Percentage): Andrei Lebedev;314;21,23 Fyodor Muratov;185;12,51 Kitsu;178;12,04 kamilsa;134;9,06 grimadas;129;8,72 Akvinikym;104;7,03 Igor Egorov;101;6,83
https://poeditor.com/projects/view?id=171155
We have unassociated contributors to our documentation, which has more than 20 pages in its printed version
In the vast majority of files there is a copyright header, including "Copyright Soramitsu Co., Ltd. All Rights Reserved."
Examples: https://github.com/hyperledger/iroha/blob/81a1fd4986d466f08d0a4c6d70781f8dc528b908/irohad/ametsuchi/impl/postgres_block_query.cpp https://github.com/hyperledger/iroha/blob/81a1fd4986d466f08d0a4c6d70781f8dc528b908/test/module/irohad/ametsuchi/postgres_query_executor_test.cpp
Files are regularly checked by Hyperledger and all source code is commented with SPDX-License-Identifier, example: https://github.com/hyperledger/iroha/blob/81a1fd4986d466f08d0a4c6d70781f8dc528b908/irohad/ametsuchi/impl/postgres_block_query.cpp https://github.com/hyperledger/iroha/blob/81a1fd4986d466f08d0a4c6d70781f8dc528b908/test/module/irohad/ametsuchi/postgres_query_executor_test.cpp
Repository on GitHub, which uses git. git is distributed.
Although we have https://github.com/hyperledger/iroha/issues?q=is%3Aissue+is%3Aopen+label%3Agood-first-issue in GitHub, we are switching now to Hyperledger JIRA board, where contributors can pick any task from the backlog: https://jira.hyperledger.org/secure/RapidBoard.jspa?rapidView=215&projectKey=IR&view=planning
All Iroha maintainers have 2FA turned on in GitHub with OTP generated in Google Auth app
https://github.com/hyperledger/iroha/blob/master/CONTRIBUTING.md#pull-requests
We use docker environment to build the code and all the dependencies are included in docker-build image here: https://hub.docker.com/r/hyperledger/iroha/ so anyone can reproduce the build
https://iroha.readthedocs.io/en/latest/guides/build.html#running-tests-optional
https://jenkins.soramitsu.co.jp/job/iroha/job/iroha-hyperledger/ test results are attached to every build, which is triggered with each commit
https://out-8410xxpdz.now.sh 78.7%
Right now we don't have implementation for this, but project roadmap already has items for TLS support in gRPC
We use GitHub: https://github.com/hyperledger/iroha
Security review was prepared for The Linux Foundation authored by Nettitude in 12th April 2018
We use valgrind and sanitizers. We also use fuzzing for all client- and peer-facing components
https://github.com/hyperledger/iroha/search?q=assert&unscoped_q=assert
后退