{"id":103546,"date":"2022-03-15T15:37:46","date_gmt":"2022-03-15T13:37:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-rejtinga-bibliotek-trebuyushhih-osoboj-proverki-bezopasnosti"},"modified":"2022-03-15T15:37:46","modified_gmt":"2022-03-15T13:37:46","slug":"obnovlenie-rejtinga-bibliotek-trebuyushhih-osoboj-proverki-bezopasnosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/de\/blog\/news\/obnovlenie-rejtinga-bibliotek-trebuyushhih-osoboj-proverki-bezopasnosti","title":{"rendered":"Aktualisierung des Ratings von Bibliotheken, die einer besonderen Sicherheits\u00fcberpr\u00fcfung bed\u00fcrfen","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Die OpenSSF (Open Source Security Foundation), die von der Linux Foundation gegr\u00fcndet wurde und darauf abzielt, die Sicherheit von Open-Source-Software zu erh\u00f6hen, hat eine neue Ausgabe der Studie Census II ver\u00f6ffentlicht, die darauf abzielt, offene Projekte zu identifizieren, die dringend einer Sicherheits\u00fcberpr\u00fcfung bed\u00fcrfen. Die Studie konzentriert sich auf die Analyse von gemeinsam genutztem Open Source Code, der implizit in verschiedenen Unternehmensprojekten in Form von Abh\u00e4ngigkeiten verwendet wird, die aus externen Repositories heruntergeladen werden.     <\/p>\n<p>Insgesamt wurden Listen von 500 der am h\u00e4ufigsten verwendeten Pakete erstellt, deren Sicherheit und Qualit\u00e4t der Unterst\u00fctzung besondere Aufmerksamkeit erfordern, da Schwachstellen und die Kompromittierung von Entwicklern dritter Komponenten, die in Anwendungen (Supply Chain) eingesetzt werden, alle Bem\u00fchungen zur Verbesserung des Schutzes des Hauptprodukts zunichte machen k\u00f6nnen. Insgesamt wurden 8 Varianten von Listen vorgeschlagen, deren Inhalte je nach verschiedenen Kriterien wie Bereitstellung in NPM-Repositories und Verf\u00fcgbarkeit von Versionsinformationen bei der Bestimmung von Abh\u00e4ngigkeiten eingestuft sind.    <\/p>\n<p>Die 10 am h\u00e4ufigsten verwendeten JavaScript-Pakete aus dem NPM-Repository, die von Anwendungen ohne Versionsbindung heruntergeladen werden:  <\/p>\n<ul>\n<li class=\"l\"> lodash\n<li class=\"l\"> react\n<li class=\"l\"> axios\n<li class=\"l\"> debug\n<li class=\"l\"> @babel\/core\n<li class=\"l\"> fastify\n<li class=\"l\"> semver\n<li class=\"l\"> uuid\n<li class=\"l\"> react-dom\n<li class=\"l\"> jquery  <\/ul>\n<p>Die 10 am h\u00e4ufigsten verwendeten Python-Pakete in Abh\u00e4ngigkeiten, die \u00fcber das pypi-Repository verteilt werden:  <\/p>\n<ul>\n<li class=\"l\"> sechs\n<li class=\"l\"> pyyaml\n<li class=\"l\"> requests\n<li class=\"l\"> urllib3\n<li class=\"l\"> jinja2\n<li class=\"l\"> python-dateutil\n<li class=\"l\"> click\n<li class=\"l\"> idna\n<li class=\"l\"> chardet\n<li class=\"l\"> markupsafe  <\/ul>\n<p>Die 10 am h\u00e4ufigsten verwendeten Ruby-Pakete in Abh\u00e4ngigkeiten, die \u00fcber das RubyGems-Repository verteilt werden:  <\/p>\n<ul>\n<li class=\"l\"> bouncy-castle-java\n<li class=\"l\"> awssdk\n<li class=\"l\"> rally-jasmine-core\n<li class=\"l\"> aws-sdk\n<li class=\"l\"> nunit\n<li class=\"l\"> cscsl\n<li class=\"l\"> highcharts-js-rails\n<li class=\"l\"> antlr3\n<li class=\"l\"> rspec\n<li class=\"l\"> asmine  <\/ul>\n<p>Die 10 am h\u00e4ufigsten verwendeten Java-Pakete in Abh\u00e4ngigkeiten, die \u00fcber das Maven-Repository verteilt werden:  <\/p>\n<ul>\n<li class=\"l\"> org.slf4j:slf4j-api\n<li class=\"l\"> com.fasterxml.jackson.core:jackson-databind\n<li class=\"l\"> com.google.guava:guava\n<li class=\"l\"> com.fasterxml.jackson.core:jackson-core\n<li class=\"l\"> org.springframework:spring-framework-bom\n<li class=\"l\"> com.fasterxml.jackson.core:jackson-annotations\n<li class=\"l\"> commons-io:commons-io\n<li class=\"l\"> junit:junit\n<li class=\"l\"> org.apache.commons:commons-lang3\n<li class=\"l\"> commons-codec:commons-codec  <\/ul>\n<p>Die 10 am h\u00e4ufigsten verwendeten .NET-Pakete in Abh\u00e4ngigkeiten, die \u00fcber das nuget-Repository verteilt werden:  <\/p>\n<ul>\n<li class=\"l\"> json.net\n<li class=\"l\"> facebook\n<li class=\"l\"> modernizr\n<li class=\"l\"> newtonsoft.json\n<li class=\"l\"> castle.core-log4net\n<li class=\"l\"> newtonsoft.json\n<li class=\"l\"> castle.core-log4net\n<li class=\"l\"> freqsystemdependencies\n<li class=\"l\"> microsoft.extensions.caching.memory\n<li class=\"l\"> microsoft.extensions.dependencyinjection.abstractions  <\/ul>\n<p>Die 10 am h\u00e4ufigsten verwendeten Pakete in Abh\u00e4ngigkeiten, die f\u00fcr die Programmiersprache Go verteilt werden:  <\/p>\n<ul>\n<li class=\"l\"> grpc\/grpc-go\n<li class=\"l\"> kubernetes\/client-go\n<li class=\"l\"> kubernetes\/apimachinery\n<li class=\"l\"> kubernetes\/api\n<li class=\"l\"> stretchr\/testify\n<li class=\"l\"> kubernetes\/klog\n<li class=\"l\"> pkg\/errors\n<li class=\"l\"> spf13\/cobra\n<li class=\"l\"> x\/net\n<li class=\"l\"> prometheus\/client_golang  <\/ul>\n<p>Quelle: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=56857\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0424\u043e\u043d\u0434 OpenSSF (Open Source Security Foundation), \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0435\u0439 Linux Foundation \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043d\u043e\u0432\u0443\u044e \u0440\u0435\u0434\u0430\u043a\u0446\u0438\u044e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f Census II, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043d\u0443\u0436\u0434\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u0432 \u043f\u0435\u0440\u0432\u043e\u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u043c \u0430\u0443\u0434\u0438\u0442\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043d\u0430 \u0430\u043d\u0430\u043b\u0438\u0437 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043d\u0435\u044f\u0432\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445 \u0432 \u0444\u043e\u0440\u043c\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0445 \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432. \u0412 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103546","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0424\u043e\u043d\u0434 OpenSSF (Open Source Security Foundation), \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0435\u0439 Linux Foundation \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043d\u043e\u0432\u0443\u044e \u0440\u0435\u0434\u0430\u043a\u0446\u0438\u044e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f Census II, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/de\/blog\/news\/obnovlenie-rejtinga-bibliotek-trebuyushhih-osoboj-proverki-bezopasnosti\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"de_DE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u0430 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u043e\u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0424\u043e\u043d\u0434 OpenSSF (Open Source Security Foundation), \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0435\u0439 Linux Foundation \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043d\u043e\u0432\u0443\u044e \u0440\u0435\u0434\u0430\u043a\u0446\u0438\u044e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f Census II, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/de\/blog\/news\/obnovlenie-rejtinga-bibliotek-trebuyushhih-osoboj-proverki-bezopasnosti\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-03-15T13:37:46+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-03-15T13:37:46+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Aktualisierung des Ratings der Bibliotheken, die einer besonderen Sicherheits\u00fcberpr\u00fcfung bed\u00fcrfen | ProHoster","description":"Die OpenSSF (Open Source Security Foundation), die von der Linux Foundation ins Leben gerufen wurde und darauf abzielt, die Sicherheit von Open Source-Software zu verbessern, hat eine neue Auflage der Studie Census II ver\u00f6ffentlicht, die darauf abzielt.","canonical_url":"https:\/\/prohoster.info\/de\/blog\/news\/obnovlenie-rejtinga-bibliotek-trebuyushhih-osoboj-proverki-bezopasnosti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"de_DE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u0430 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u043e\u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 | ProHoster","og:description":"\u0424\u043e\u043d\u0434 OpenSSF (Open Source Security Foundation), \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0435\u0439 Linux Foundation \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043d\u043e\u0432\u0443\u044e \u0440\u0435\u0434\u0430\u043a\u0446\u0438\u044e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f Census II, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430.","og:url":"https:\/\/prohoster.info\/de\/blog\/news\/obnovlenie-rejtinga-bibliotek-trebuyushhih-osoboj-proverki-bezopasnosti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-03-15T13:37:46+00:00","article:modified_time":"2022-03-15T13:37:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103546","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-03-15 13:38:59","updated":"2022-10-08 05:03:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/103546","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/comments?post=103546"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/103546\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/media?parent=103546"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/categories?post=103546"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/tags?post=103546"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}