Kashi 75% na aikace-aikacen kasuwanci sun haɗa da tsohuwar lambar tushe tare da lahani

Kamfanin Synopsys nazari 1253 codebases na kasuwanci kuma sun kammala cewa kusan duka (99%) na aikace-aikacen kasuwanci da aka duba sun haɗa da aƙalla ɓangaren tushen buɗaɗɗen, kuma 70% na lambar a cikin ma'ajiyar da aka duba ta bude ce. Don kwatanta, a cikin irin wannan binciken a cikin 2015, rabon tushen budewa shine 36%.

Koyaya, a mafi yawan lokuta, ba a sabunta lambar tushe ta ɓangare na uku da aka yi amfani da ita kuma tana ƙunshe da yuwuwar matsalolin tsaro - 91% na wuraren da aka bita suna da buɗaɗɗen abubuwan da ba a sabunta su sama da shekaru 5 ba ko kuma sun kasance a cikin tsari da aka watsar don aƙalla shekaru biyu kuma masu haɓaka ba su kula da su. Sakamakon haka, kashi 75% na buɗaɗɗen lambar tushe da aka gano a cikin ma'ajiya ta ƙunshi sanannun lahani da ba a fayyace ba, rabinsu suna da babban haɗari. A cikin samfurin 2018, rabon lambar tare da rauni shine 60%.

Mafi yawan lahani mai haɗari shine
matsala CVE-2018-16487 (kisa lambar nesa) a cikin ɗakin karatu lodash don Node.js, nau'ikan nau'ikan nau'ikan su waɗanda aka ci karo da su sama da sau 500. Mafi tsufa rashin lahani shine matsala a cikin lpd daemon (CVE-1999-0061), sake dubawa a cikin 1999.

Baya ga tsaro a cikin ka'idodin ka'idodin ayyukan kasuwanci, akwai kuma halin sakaci game da bin ka'idodin lasisi na kyauta.
A cikin kashi 73% na wuraren ajiya, an sami matsaloli tare da halaccin amfani da buɗaɗɗen tushe, alal misali, lasisin da bai dace ba (yawanci lambar GPL tana haɗawa cikin samfuran kasuwanci ba tare da buɗe samfurin da aka samu ba) ko amfani da lamba ba tare da ƙayyadadden lasisi ba. 93% na duk matsalolin lasisi suna faruwa a yanar gizo da aikace-aikacen hannu. A cikin wasanni, tsarin gaskiya na gaskiya, multimedia da shirye-shiryen nishaɗi, an lura da cin zarafi a cikin 59% na lokuta.

Gabaɗaya, binciken ya gano ɓangarorin buɗe ido guda 124 waɗanda aka saba amfani da su a cikin duk sansanonin lamba. Mafi shahara sune: jQuery (55%), Bootstrap (40%), Font Awesome (31%), Lodash (30%) da jQuery UI (29%). Dangane da harsunan shirye-shirye, mafi mashahuri sune JavaScript (amfani da kashi 74% na ayyukan), C++ (57%), Shell (54%), C (50%), Python (46%), Java (40%), TypeScript (36%), C# (36%); Perl (30%) da Ruby (25%). Jimlar rabon harsunan shirye-shirye shine:
JavaScript (51%), C++ (10%), Java (7%), Python (7%), Ruby (5%), Go (4%), C (4%), PHP (4%), TypeScript ( 4%), C # (3%), Perl (2%) da Shell (1%).

source: budenet.ru