Sonatype, kampani yomwe imagwira ntchito zodzitchinjiriza polimbana ndi kuukira kwa chain chain, idasindikiza zotsatira za kafukufuku (PDF, masamba 62) pa nkhani zodalira ndi kukonza m'mapulojekiti otsegula a Java, JavaScript, Python, ndi .NET omwe amakhala ku Maven Central, NPM, PyPl, ndi Nuget repositories. M'chaka chathachi, chiwerengero cha mapulojekiti omwe ali m'malo osungiramo zinthu zachilengedwe chakwera ndi 29%. Chiwerengero cha zotsitsa pamapaketi omwe akufunsidwa adakwera ndi 33% mu 2023, poyerekeza ndi 73% mu 2021.
Zochita zoyipa m'malo osungira zakula kwambiri - maphukusi oyipa 245 apezeka kuyambira kuchiyambi kwa chaka, ndipo kuchuluka kwa ziwopsezo zojambulidwa zomwe cholinga chake ndikusintha odalira chawonjezeka kawiri.
Ma projekiti ambiri akupitilizabe kugwiritsa ntchito mitundu yosatetezeka. Mwachitsanzo, 23% ya kutsitsa kwa phukusi la Log4j Java kumaphatikizaponso zosintha zomwe zili ndi zovuta zomwe zakhazikitsidwa mu 2021. M'malo osungira a Maven Central, pafupifupi 12% ya zotsitsa zonse ndi za zigawo zomwe zili ndi zovuta zodziwika. Pa avareji, m'malo onse osungira, gawo la kutsitsa kwamitundu yakale yamapaketi omwe amadziwika kuti ndi oopsa (mwachitsanzo, omwe ali ndi zovuta zosasinthika) ndi 20% (mu 80% ya milandu, mtundu wapano umatsitsidwa). Mu 96% ya milandu, kutsitsa kwa zigawo zomwe zili pachiwopsezo zikanapewedwa posankha mitundu yomwe nkhaniyo idakhazikitsidwa kale.
Vuto lalikulu pakusunga chitetezo ndikusowa kosamalira bwino ntchito. Ili ndi vuto lalikulu pazachilengedwe za Java ndi JavaScript: chaka chatha, imodzi mwazinthu zisanu (18.6%) zomwe zidatumizidwa ku Maven Central ndi NPM, ndikusungidwa chaka chatha, zasiya kukonza. Mwa ma projekiti 1.176 miliyoni omwe adawunikidwa ku Maven, NPM, PyP1, ndi NuGet repositories, 11% yokha (118,000) ikupitilizabe kusamalidwa.
Kafukufukuyu adaphatikizanso kafukufuku wa akatswiri opanga 621 ochokera kumakampani osiyanasiyana. Makumi asanu ndi limodzi mphambu asanu ndi awiri mwa anthu 100 aliwonse omwe anafunsidwa akukhulupirira kuti mapulogalamu awo sagwiritsa ntchito malaibulale omwe ali pachiwopsezo, 10% adakumana ndi zochitika zachitetezo zomwe zidachitika chifukwa chachitetezo chotseguka m'miyezi 12 yapitayi, ndipo 20% sakudziwa. Makampani makumi awiri mphambu asanu ndi atatu pa zana aliwonse amazindikira zinthu zomwe zili pachiwopsezo mkati mwa tsiku limodzi atawululidwa, 39% amazizindikira mkati mwa tsiku limodzi mpaka 7, ndipo 29% amazizindikira mkati mwa sabata.
Source: opennet.ru
