GitHub tau tshaj tawm qhov kev tso tawm ntawm NPM 8.15 tus thawj tswj pob, suav nrog Node.js thiab siv los faib JavaScript modules. Nws tau sau tseg tias ntau dua 5 billion pob tau rub tawm los ntawm NPM txhua hnub.
Cov kev hloov pauv tseem ceeb:
- Ib qho tshiab "kev kos npe kos npe" cov lus txib tau ntxiv los ua qhov kev tshawb xyuas hauv zos ntawm kev ncaj ncees ntawm cov pob khoom uas tau teeb tsa, uas tsis tas yuav muaj kev tswj hwm nrog PGP cov khoom siv hluav taws xob. Cov txheej txheem pov thawj tshiab yog ua raws li kev siv cov kos npe digital raws li ECDSA algorithm thiab kev siv HSM (Hardware Security Module) rau kev tswj hwm qhov tseem ceeb. Tag nrho cov pob hauv NPM repository twb tau rov kos npe siv lub tswv yim tshiab.
- Enhanced two-factor authentication tau tshaj tawm raws li dav muaj. Ntxiv ib qho yooj yim nkag mus thiab tshaj tawm cov txheej txheem rau npm CLI, khiav los ntawm qhov browser. Thaum qhov "-auth-type = web" kev xaiv tau teev tseg, lub vev xaib cuam tshuam qhib hauv browser yog siv los txheeb xyuas tus as khauj. Kev sib tham tsis nco qab. Txhawm rau tsim kom muaj kev sib tham, koj yuav tsum paub meej tias koj tus email siv ib zaug passwords (OTP), thiab thaum ua haujlwm hauv cov kev sib tham twb tau tsim lawm, koj tsuas yog yuav tsum tau lees paub qhov thib ob theem ntawm ob qhov kev lees paub tseeb. Ib hom kev nco qab yog muab, tso cai rau koj ua haujlwm tshaj tawm hauv 5 feeb los ntawm tib tus IP thiab nrog tib lub token yam tsis muaj kev lees paub ob qho ntxiv.
- Muab lub peev xwm los txuas GitHub thiab Twitter cov nyiaj rau NPM, tso cai rau koj txuas rau NPM siv koj li GitHub thiab Twitter accounts.
Cov phiaj xwm ntxiv hais txog kev suav nrog qhov yuav tsum tau muaj ob qhov kev lees paub tseeb rau cov nyiaj cuam tshuam nrog cov pob khoom uas muaj ntau dua 1 lab rub tawm hauv ib lub lis piam lossis muaj ntau dua 500 pob khoom nyob. Tam sim no, yuav tsum muaj ob qhov kev lees paub tseeb tsuas yog siv rau saum 500 pob khoom.
Tau qhov twg los: opennet.ru