Software supply chain security was hard enough. Then AI joined the build pipeline. For five years, "software supply chain security" meant one question: what's in your code? Which open-source packages, ...
CLAUDE.md 就是你项目的「团队公约」。 Claude Code 启动时会自动读取它,把你写的规则当成团队共同约定来遵守。不写也能用,但等于你招了一个能力很强但完全不了解你们项目的新人,每次沟通都要从头交代背景。 上个月我在文章里留了个留言区,说「你们在 ...