開源日報每天推薦一個 GitHub 優質開源項目和一篇精選英文科技或編程文章原文，堅持閱讀《開源日報》，保持每日學習的好習慣。

2023年12月19日，開源日報第1048期：
今日推薦開源項目：《PDF Reader in JavaScript》
今日推薦英文原文：《Vue 2 is Approaching End Of Life》

開源項目

今日推薦開源項目：《PDF Reader in JavaScript》傳送門：項目鏈接

PDF.js is community-driven and supported by Mozilla. Our goal is to create a general-purpose, web standards-based platform for parsing and rendering PDFs.

PDF.js是一個用HTML5構建的可移植文檔格式（PDF）查看器, 真正引入項目時可先查看官方詳細示例

英文原文

今日推薦英文原文：Vue 2 is Approaching End Of Life

推薦理由：Vue 2 將於 2023 年 12 月 31 日結束生命周期（EOL）,也將不再接收新功能、更新或修復，儘管它仍將在所有現有的分發渠道上可用（CDN、包管理器、Github等）,講了遷移至Vue 3的一些好處和沿用 Vue 2的辦法

Vue 2 is Approaching End Of Life

With 2024 almost upon us, we would like to take this opportunity to remind the Vue community that Vue 2 will reach End of Life (EOL) on December 31st, 2023.

Vue 2.0 was released more than 7 years ago in 2016. It was a major milestone in Vue's journey of becoming a mainstream framework. Many current Vue users started using Vue during the Vue 2 era, and many great things have been built with it.

However, active maintenance of two major versions in parallel isn't sustainable for us. As Vue 3 and its ecosystem have matured, it is time for the team to move on and focus our energy on the latest major version.

What Actually Happens on December 31, 2023?

For the past 18 months since Vue 2.7, Vue 2 has received necessary bug and security fixes, but we stopped shipping new features so we can focus our energy on improving Vue 3.

As we approach this date, the Vue community should prepare for the deprecation of Vue 2. On December 31, we will mark the following packages as deprecated on npm:

  • All major and minor versions of Vue 2 core
  • vue-router versions exclusively supporting Vue 2 (3.x and below)
  • vuex versions exclusively supporting Vue 2 (3.x and below)

After December 31, 2023, Vue 2 will no longer receive new features, updates, or fixes, though it will still be available on all existing distribution channels (CDNs, package managers, Github, etc).

In other words, your applications will continue to work, but you will get deprecation warnings from your package mananger reminding you that Vue 2 is no longer a supported version.

What』s Next

Vue 3 has been the default version of Vue since February 7, 2022. Users who have migrated have enjoyed:

  • Better performance with a smaller bundle size and faster rendering.
  • Enhanced TypeScript support for easier large-scale application development.
  • More efficient Proxy-based reactivity system.
  • New built-in components like Fragment, Teleport, and Suspense.
  • Improved build tooling support and Vue Devtools experience.
  • …and more!

When and if you can, consider migrating!

Still on Vue 2? Here Are Your Options.

Recognizing the various situations that arise during transitions, we are also fully aware that users may need other options until they』re able to migrate, or maybe migration simply isn't a feasible path. Here are some other options to consider.

Update to the Vue 2 Final Release

The to-be-released EOL version (2.7.16) below will be the final release of Vue 2. The planned released date is December 23, 2023. This patch release includes a few final fixes for 2.7 features and improves type alignment with Vue 3. It is currently in beta and we encourage you to try it out and report any possible regressions between this version and 2.7.15.

We strongly encourage you to update to 2.7.16 once it's out. This will be the starting point for extended support mentioned below.

Purchase Extended Support for Vue 2

If you have to stay on Vue 2 post-EOL, we have partnered with HeroDevs to offer Never-Ending Support (NES). Vue 2 NES provides ongoing updates and security patches for Vue 2 even after EOL so that applications with strict compliance requirements remain secure and compliant. It also guarantees that Vue 2 applications will continue to operate effectively in modern browsers and maintain compatibility with essential libraries like Nuxt, Vuex, and Vuetify 2. Finally, Vue 2 NES has continuous security monitoring and a 14-day SLA for fixes.

Vue 2 NES is the continuation of the support you』ve enjoyed during the Vue 2 LTS period — but indefinitely. For more detailed information, visit the HeroDevs Vue 2 NES page.

Notify Your Users of your Vue 2 Post-EOL Plan

If you can』t migrate to Vue 3 or use Vue 2 NES at the moment but still remain on Vue 2, you may need to consider how you will communicate your Vue 2 security plans to your customers.

This does not apply to all Vue users, but many teams are prohibited from shipping unsupported software by SLAs, Contracts & Agreements, or other obligations to downstream parties. These could be with customers, compliance agencies, or even internal company departments. For an increasing number of industries, governing regulatory bodies are also raising expectations on what software creators are accountable for.

If you work with such business requirements, You may need to let your customers, managers, CISO, or other relevant stakeholders, know about your plan to manage support and address any potential CVEs. Vue 2 hasn』t had major vulnerabilities in the past, but CVEs do turn up for even the most mature EOL projects — whether directly or via compromised dependencies. Subscribing to CVE notifications through organizations like OpenCVE and Snyk can be a good way to find out about vulnerabilities as soon as they』re discovered. Browsers may also ship changes that break legacy libraries - this is rare, but it does happen.

Looking Forward

It will be an emotional moment for me when Vue 2 finally reaches EOL, but at the same time I am more excited than ever about the future ahead of us. The Vue 3 ecosystem has been thriving with innovation. Vue 3.4 is currently in beta with performance improvements for both the compiler and runtime. We are also making good progress on Vapor Mode. The end of Vue 2 only marks a new beginning - 2024 will be an exciting year for Vue!

下載開源日報APP：https://openingsource.org/2579/
加入我們：https://openingsource.org/about/join/
關注我們：https://openingsource.org/about/love/