Glossary entry (derived from question below)
Jul 9, 2021 10:53
2 yrs ago
21 viewers *
English term
China
blindsided
English to Chinese
Tech/Engineering
IT (Information Technology)
security
In April 2018, npm version 6 was released, bringing with it the audit command, because security in the npm ecosystem had become something that could no longer be ignored. JavaScript developers using npm could thereafter type npm audit and they'd receive a security analysis of their projects' dependency tree – the various intertwined libraries imported into the project to avoid having to rewrite common functions from scratch.
The problem is npm audit overcorrected. Where a few years ago, JavaScript developers could look forward to being {blindsided} by security problems, npm runs its audit automatically after every npm install command and often produces a flood of vulnerability advisories that may not be easily fixable and may not really be applicable.
JavaScript开发人员可能期盼着发现意外的安全问题？
The problem is npm audit overcorrected. Where a few years ago, JavaScript developers could look forward to being {blindsided} by security problems, npm runs its audit automatically after every npm install command and often produces a flood of vulnerability advisories that may not be easily fixable and may not really be applicable.
JavaScript开发人员可能期盼着发现意外的安全问题？
Proposed translations
(Chinese)
| 3 | 出乎意料地 |
Patrick Cheng
|
| 4 | 可能會「預期」意外遭遇安全性問題 (攻其不備) |
brunoccj
|
| 4 | 遇到想不到的安全问题 / 遇到事前看不到的安全问题 |
Kiet Bach
|
Change log
Jul 24, 2021 23:18: Patrick Cheng Created KOG entry
Proposed translations
2 hrs
Patrick Cheng
United States
United States
Native in Chinese
Works in field
United States
Earn your trust job by job
Native in: Chinese (Variants: Traditional, Simplified) 
Works in: Chinese to English, English to Chinese
Related KudoZ points
:
1581
Selected
出乎意料地
感觉是说，在那些以前开发人员感觉不大可能出现安全问题的地方（如果出现问题，可能会觉得出乎意料），现在npm audit会给出很多有关漏洞的建议。
4 KudoZ points awarded for this answer.
Comment: "谢谢！"
1 day 5 hrs
可能會「預期」意外遭遇安全性問題 (攻其不備)
xxx
6 hrs
遇到想不到的安全问题 / 遇到事前看不到的安全问题
blindsided: 被来自看不到的方向袭击；被来自盲侧的方向袭击；被暗算。
The problem is npm audit overcorrected. Where a few years ago, JavaScript developers could look forward to being {blindsided} by security problems, ...
问题是 npm audit 列出的弱点太多。数年前，JavaScript 开发者知道可能会遇到想不到的安全问题，...
npm audit 列出的弱点太多，有些不是那么容易修补，有些根本就与编写的程序无关。
--------------------------------------------------
Note added at 8 hrs (2021-07-09 18:55:31 GMT)
--------------------------------------------------
The problem is npm audit overcorrected. Where a few years ago (when there was no npm audit), JavaScript developers could look forward to being {blindsided} by security problems, (but now) npm runs its audit automatically after every npm install command and often produces a flood of vulnerability advisories that may not be easily fixable and may not really be applicable.
--------------------------------------------------
Note added at 8 hrs (2021-07-09 19:04:31 GMT)
--------------------------------------------------
数年前 (没有 npm audit 的时候)，JavaScript 开发者知道可能会遇到想不到的安全问题，(但是现在) 在每个 npm install 指令之后，npm 都自动侦查 ...
--------------------------------------------------
Note added at 3 days 8 hrs (2021-07-12 19:10:58 GMT)
--------------------------------------------------
"look forward to" 直译成 “期盼” 是有点不妥，我想作者的意思应该是 “预料到”。
The problem is npm audit overcorrected. Where a few years ago, JavaScript developers could look forward to being {blindsided} by security problems, ...
问题是 npm audit 列出的弱点太多。数年前，JavaScript 开发者知道可能会遇到想不到的安全问题，...
npm audit 列出的弱点太多，有些不是那么容易修补，有些根本就与编写的程序无关。
--------------------------------------------------
Note added at 8 hrs (2021-07-09 18:55:31 GMT)
--------------------------------------------------
The problem is npm audit overcorrected. Where a few years ago (when there was no npm audit), JavaScript developers could look forward to being {blindsided} by security problems, (but now) npm runs its audit automatically after every npm install command and often produces a flood of vulnerability advisories that may not be easily fixable and may not really be applicable.
--------------------------------------------------
Note added at 8 hrs (2021-07-09 19:04:31 GMT)
--------------------------------------------------
数年前 (没有 npm audit 的时候)，JavaScript 开发者知道可能会遇到想不到的安全问题，(但是现在) 在每个 npm install 指令之后，npm 都自动侦查 ...
--------------------------------------------------
Note added at 3 days 8 hrs (2021-07-12 19:10:58 GMT)
--------------------------------------------------
"look forward to" 直译成 “期盼” 是有点不妥，我想作者的意思应该是 “预料到”。
Discussion
几年前，JavaScript 的开发人员可能还提防着被安全问题打个措手不及（偷袭），但现在每次运行 npm install 命令后，npm 都会自动运行 audit.......
look forward to 在这里译成期待不合适，毕竟一般情况下碰到 security problem 不是好事（不排除有的程序员喜欢挑战风险）。没装 npm audit 以前，安全风险还是存在的，所以需要提防注意。安装之后则是矫枉过正了。
reference site: https://hub.packtpub.com/npm-v6-is-out/
https://dictionary.cambridge.org/dictionary/english-chinese-...