{"id":103546,"date":"2022-03-15T15:37:46","date_gmt":"2022-03-15T13:37:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-rejtinga-bibliotek-trebuyushhih-osoboj-proverki-bezopasnosti"},"modified":"2022-03-15T15:37:46","modified_gmt":"2022-03-15T13:37:46","slug":"obnovlenie-rejtinga-bibliotek-trebuyushhih-osoboj-proverki-bezopasnosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/obnovlenie-rejtinga-bibliotek-trebuyushhih-osoboj-proverki-bezopasnosti","title":{"rendered":"Actualizarea ratingului bibliotecilor care necesit\u0103 o aten\u021bie special\u0103 pentru securitate.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Fondul OpenSSF (Open Source Security Foundation), creat de organiza\u021bia Linux Foundation \u0219i destinat cre\u0219terii securit\u0103\u021bii software-ului open source, a publicat o nou\u0103 edi\u021bie a studiului Census II, care are scopul de a identifica proiectele open source ce necesit\u0103 un audit de securitate prioritar. Studiul se concentreaz\u0103 pe analiza codului open source utilizat \u00een comun, care este folosit implicit \u00een diverse proiecte corporative sub form\u0103 de dependen\u021be desc\u0103rcate din repozitorii externe.     <\/p>\n<p>\u00cen urma acestuia, au fost preg\u0103tite liste cu cele 500 de pachete cel mai frecvent utilizate, a c\u0103ror securitate \u0219i calitate de \u00eentre\u021binere necesit\u0103 o aten\u021bie special\u0103, deoarece vulnerabilit\u0103\u021bile \u0219i compromiterea dezvoltatorilor componentelor externe implicate \u00een func\u021bionarea aplica\u021biilor (supply chain) pot anula toate eforturile de \u00eembun\u0103t\u0103\u021bire a protec\u021biei produsului de baz\u0103. \u00cen total, au fost propuse 8 variante de liste, con\u021binutul c\u0103rora este clasificat \u00een func\u021bie de diferite criterii, cum ar fi livrarea \u00een repozitorii NPM \u0219i disponibilitatea informa\u021biilor despre versiune \u00een determinarea dependen\u021belor.    <\/p>\n<p>Cele 10 pachete JavaScript cel mai frecvent utilizate din repozitorul NPM, desc\u0103rcate de aplica\u021bii f\u0103r\u0103 leg\u0103tur\u0103 cu versiunea:  <\/p>\n<ul>\n<li class=\"l\"> lodash\n<li class=\"l\"> react\n<li class=\"l\"> axios\n<li class=\"l\"> debug\n<li class=\"l\"> @babel\/core\n<li class=\"l\"> express\n<li class=\"l\"> semver\n<li class=\"l\"> uuid\n<li class=\"l\"> react-dom\n<li class=\"l\"> jquery  <\/ul>\n<p>Cele 10 pachete Python cel mai frecvent utilizate \u00een dependen\u021be, distribuite prin repozitorul pypi:  <\/p>\n<ul>\n<li class=\"l\"> \u0219ase\n<li class=\"l\"> pyyaml\n<li class=\"l\"> requests.\n<li class=\"l\"> urllib3\n<li class=\"l\"> jinja2\n<li class=\"l\"> python-dateutil\n<li class=\"l\"> click\n<li class=\"l\"> idna\n<li class=\"l\"> chardet\n<li class=\"l\"> markupsafe  <\/ul>\n<p>Cele 10 pachete Ruby cel mai frecvent utilizate \u00een dependen\u021be, distribuite prin repozitorul RubyGems:  <\/p>\n<ul>\n<li class=\"l\"> bouncy-castle-java\n<li class=\"l\"> awssdk\n<li class=\"l\"> rally-jasmine-core\n<li class=\"l\"> aws-sdk\n<li class=\"l\"> nunit\n<li class=\"l\"> cscsl\n<li class=\"l\"> highcharts-js-rails\n<li class=\"l\"> antlr3\n<li class=\"l\"> rspec\n<li class=\"l\"> asmine  <\/ul>\n<p>Cele 10 pachete Java cel mai frecvent utilizate \u00een dependen\u021be, distribuite prin repozitorul Maven:  <\/p>\n<ul>\n<li class=\"l\"> org.slf4j:slf4j-api\n<li class=\"l\"> com.fasterxml.jackson.core:jackson-databind\n<li class=\"l\"> com.google.guava:guava\n<li class=\"l\"> com.fasterxml.jackson.core:jackson-core\n<li class=\"l\"> org.springframework:spring-framework-bom\n<li class=\"l\"> com.fasterxml.jackson.core:jackson-annotations\n<li class=\"l\"> commons-io:commons-io\n<li class=\"l\"> junit:junit\n<li class=\"l\"> org.apache.commons:commons-lang3\n<li class=\"l\"> commons-codec:commons-codec  <\/ul>\n<p>Cele 10 pachete .NET cel mai frecvent utilizate \u00een dependen\u021be, distribuite prin repozitorul nuget:  <\/p>\n<ul>\n<li class=\"l\"> json.net\n<li class=\"l\"> facebook\n<li class=\"l\"> modernizr\n<li class=\"l\"> newtonsoft.json\n<li class=\"l\"> castle.core-log4net\n<li class=\"l\"> newtonsoft.json\n<li class=\"l\"> castle.core-log4net\n<li class=\"l\"> freqsystemdependencies\n<li class=\"l\"> microsoft.extensions.caching.memory\n<li class=\"l\"> microsoft.extensions.dependencyinjection.abstractions  <\/ul>\n<p>Cele 10 pachete cele mai frecvent utilizate \u00een dependen\u021be, distribuite pentru limbajul Go:  <\/p>\n<ul>\n<li class=\"l\"> grpc\/grpc-go\n<li class=\"l\"> kubernetes\/client-go\n<li class=\"l\"> kubernetes\/apimachinery\n<li class=\"l\"> kubernetes\/api\n<li class=\"l\"> stretchr\/testify\n<li class=\"l\"> kubernetes\/klog\n<li class=\"l\"> pkg\/errors\n<li class=\"l\"> spf13\/cobra\n<li class=\"l\"> x\/net\n<li class=\"l\"> prometheus\/client_golang  <\/ul>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=56857\">opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0424\u043e\u043d\u0434 OpenSSF (Open Source Security Foundation), \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0435\u0439 Linux Foundation \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043d\u043e\u0432\u0443\u044e \u0440\u0435\u0434\u0430\u043a\u0446\u0438\u044e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f Census II, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043d\u0443\u0436\u0434\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u0432 \u043f\u0435\u0440\u0432\u043e\u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u043c \u0430\u0443\u0434\u0438\u0442\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043d\u0430 \u0430\u043d\u0430\u043b\u0438\u0437 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043d\u0435\u044f\u0432\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445 \u0432 \u0444\u043e\u0440\u043c\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0445 \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432. \u0412 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103546","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0424\u043e\u043d\u0434 OpenSSF (Open Source Security Foundation), \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0435\u0439 Linux Foundation \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043d\u043e\u0432\u0443\u044e \u0440\u0435\u0434\u0430\u043a\u0446\u0438\u044e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f Census II, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/obnovlenie-rejtinga-bibliotek-trebuyushhih-osoboj-proverki-bezopasnosti\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u0430 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u043e\u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0424\u043e\u043d\u0434 OpenSSF (Open Source Security Foundation), \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0435\u0439 Linux Foundation \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043d\u043e\u0432\u0443\u044e \u0440\u0435\u0434\u0430\u043a\u0446\u0438\u044e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f Census II, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/obnovlenie-rejtinga-bibliotek-trebuyushhih-osoboj-proverki-bezopasnosti\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-03-15T13:37:46+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-03-15T13:37:46+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Actualizarea clasamentului bibliotecilor care necesit\u0103 verific\u0103ri de securitate speciale | ProHoster","description":"Funda OpenSSF (Open Source Security Foundation), creat\u0103 de organiza\u021bia Linux Foundation \u0219i dedicat\u0103 cre\u0219terii securit\u0103\u021bii software-ului liber, a publicat o nou\u0103 edi\u021bie a studiului Census II, care vizeaz\u0103.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/obnovlenie-rejtinga-bibliotek-trebuyushhih-osoboj-proverki-bezopasnosti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u0430 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u043e\u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 | ProHoster","og:description":"\u0424\u043e\u043d\u0434 OpenSSF (Open Source Security Foundation), \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0435\u0439 Linux Foundation \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043d\u043e\u0432\u0443\u044e \u0440\u0435\u0434\u0430\u043a\u0446\u0438\u044e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f Census II, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/obnovlenie-rejtinga-bibliotek-trebuyushhih-osoboj-proverki-bezopasnosti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-03-15T13:37:46+00:00","article:modified_time":"2022-03-15T13:37:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103546","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-03-15 13:38:59","updated":"2022-10-08 05:03:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/103546","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=103546"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/103546\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=103546"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=103546"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=103546"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}