Tauri 理念
Tauri 是一个工具包,帮助开发者为主要的桌面平台开发应用——使用几乎任何现有的前端框架。核心是用 Rust 构建的,CLI 则利用 Node.js,使 Tauri 成为一种真正的多语言方法,用于创建和维护优秀的应用。
🌐 Tauri is a toolkit that helps developers make applications for the major desktop platforms - using virtually any frontend framework in existence. The core is built with Rust, and the CLI leverages Node.js making Tauri a genuinely polyglot approach to creating and maintaining great apps.
🌐 Security First
在当今世界,每一个可靠的威胁模型都假设用户的设备已经被入侵。这给应用开发者带来了复杂的局面,因为如果设备已经存在风险,那么软件如何能被信任呢?
🌐 In today’s world, every honest threat model assumes that the user’s device has already been compromised. This puts app developers in a complicated situation because if the device is already at risk, how can the software be trusted?
纵深防御是我们采用的方法。我们希望你能够采取一切可能的预防措施,以尽量减少你向攻击者暴露的面。Tauri 允许你选择要发布的 API 端点,是否希望在应用中内置本地主机服务器,它甚至在运行时对功能句柄进行随机化。这些以及其他技术形成了一个安全基线,使你和你的用户受益。
🌐 Defense in depth is the approach we’ve taken. We want you to be able to take every precaution possible to minimize the surface area you present to attackers. Tauri lets you choose which API endpoints to ship, whether or not you want a localhost server built into your app, and it even randomizes functional handles at runtime. These and other techniques form a secure baseline that empowers you and your users.
通过让静态攻击极其困难并使系统相互隔离来减缓攻击者的速度,这就是游戏的关键。如果你来自 Electron 生态系统——请放心——默认情况下,Tauri 只提供二进制文件,而不是 ASAR 文件。
🌐 Slowing down attackers by making static attacks crushingly difficult and isolating systems from one another is the name of the game. And if you are coming from the Electron ecosystem - rest assured - by default Tauri only ships binaries, not ASAR files.
通过选择以安全性为指导力量构建 Tauri,我们为你提供了采取主动安全态势的各种机会。
🌐 By choosing to build Tauri with security as a guiding force, we give you every opportunity to take a proactive security posture.
🌐 Polyglots, not Silos
大多数现代框架使用单一的语言范式,因此被困在知识和表达方式的泡沫中。这在某些特定的应用中可能效果很好,但它也助长了一种部落主义倾向。
🌐 Most contemporary frameworks use a single language paradigm and are therefore trapped in a bubble of knowledge and idiom. This can work well for certain niche applications, but it also fosters a kind of tribalism.
从 React、Angular 和 Vue 开发社区在其堆栈上挤在一起的方式可以看出,最终很少产生交叉影响。
🌐 This can be seen in the way that the React, Angular, and Vue development communities huddle on their stacks, ultimately breeding very little cross-pollination.
在 Rust 与 Node 与 C++ 的战场上也可以看到同样的情况,强硬派坚持自己的立场,拒绝跨社区合作。
🌐 This same situation can be seen in the Rust vs. Node vs. C++ battlefields, where hardliners take their stances and refuse to collaborate across communities.
今天,Tauri 在后端使用 Rust —— 但在不久的将来,其他后端如 Go、Nim、Python、C# 等也将成为可能。这是因为我们正在维护对 webview 组织的官方 Rust 绑定,并计划让你根据需求切换后端。由于我们的 API 可以用任何支持 C 互操作的语言实现,因此完全兼容只需一个 PR 就能实现。
🌐 Today, Tauri uses Rust for the backend - but in the not too distant future, other backends like Go, Nim, Python, Csharp, etc. will be possible. This is because we are maintaining the official Rust bindings to the webview organization and plan to let you switch out the backend for your needs. Since our API can be implemented in any language with C interop, full compliance is only a PR away.
🌐 Honest Open Source
如果没有社区,这一切都毫无意义。如今的软件社区是令人惊叹的地方,人们在这里互相帮助,创造出很棒的东西——开源在其中占有非常重要的地位。
🌐 None of this would make any sense without a community. Today software communities are amazing places where people help each other and make awesome things - open source is a very big part of that.
开源对不同的人意味着不同的东西,但大多数人会同意,它的目的是支持自由。当软件不尊重你的权利时,它可能显得不公平,并通过以不道德的方式运行而可能危及你的自由。
🌐 Open source means different things to different people, but most will agree that it serves to support freedom. When software doesn’t respect your rights, then it can seem unfair and potentially compromise your freedoms by operating in unethical ways.
这就是为什么我们为自由/开源软件(FLOSS)的倡导者能够使用 Tauri 构建“经认证”的开源应用并且可以被包含在 FSF 认可的 GNU/Linux 发行版中而感到自豪。
🌐 This is why we are proud that FLOSS advocates can build applications with Tauri that are “certifiably” open source and can be included in FSF endorsed GNU/Linux distributions.
🌐 The Future
Tauri 的未来取决于你的参与和贡献。试用它,提交问题,加入工作组或捐款——每一份贡献都很重要。无论如何,请务必联系我们!!!
🌐 Tauri’s future depends on your involvement and contributions. Try it out, file issues, join a working group or make a donation - every contribution is important. Please, at any rate, do get in touch!!!
Tauri 中文网 - 粤ICP备13048890号
Nodejs.cn 旗下网站