{"id":113035,"date":"2024-01-21T23:28:08","date_gmt":"2024-01-21T21:28:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/8-2-naibolee-populyarnyh-zagruzok-v-npm-prihoditsya-na-ustarevshie-pakety"},"modified":"2024-01-21T23:28:08","modified_gmt":"2024-01-21T21:28:08","slug":"8-2-naibolee-populyarnyh-zagruzok-v-npm-prihoditsya-na-ustarevshie-pakety","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/8-2-naibolee-populyarnyh-zagruzok-v-npm-prihoditsya-na-ustarevshie-pakety","title":{"rendered":"8.2% dintre cele mai populare desc\u0103rc\u0103ri din NPM provin din pachete \u00eenvechite","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Cercet\u0103torii de la Aqua Security au publicat rezultatele unei analize a statisticilor despre cele 50.000 de cele mai desc\u0103rcate pachete din depozitul NPM. 7.500 (15%) dintre cele mai desc\u0103rcate pachete s-au dovedit a fi legate de pachete \u00eenvechite \u0219i proiecte suspendate. Pentru a simplifica identificarea pachetelor \u00eenvechite printre dependen\u021bele utilizate \u00een proiectul s\u0103u, a fost propus\u0103 o unealt\u0103 numit\u0103 Dependency-Deprecated-Checker, publicat\u0103 sub licen\u021ba MIT. <\/p>\n

\u00cen 4.100 (8.2%) dintre pachetele examinate \u00een lan\u021bul de dependen\u021be au fost identificate pachete, oficial declarate \u00een NPM ca fiind \u00eenvechite sau legate de proiecte \u00eenvechite (de exemplu, pachetul request este marcat ca \u00eenvechit, dar continu\u0103 s\u0103 fie utilizat ca dependen\u021b\u0103 direct\u0103 de 55.000 de pachete). 2.300 (4.6%) dintre pachete sunt legate de depozite pe GitHub, transformate \u00een arhive (dezvoltarea a fost oprit\u0103, de exemplu, depozitul pachetului through este marcat ca arhiv\u0103, dar este utilizat ca dependen\u021b\u0103 direct\u0103 de 3.000 de pachete). 1.100 (2.2%) dintre pachete fac referire la depozite care nu mai exist\u0103, accesarea c\u0103rora returneaz\u0103 eroarea 404. 3.100 (6.2%) dintre pachete nu con\u021bin informa\u021bii despre depozit.

\"8.2%<\/center> <\/p>\n

\u00cen termeni absolu\u021bi, r\u0103sp\u00e2ndirea pachetelor \u00eenvechite \u0219i a pachetelor f\u0103r\u0103 linkuri c\u0103tre depozite \u00een NPM este extrapolat\u0103 la aproximativ 2,1 miliarde de desc\u0103rc\u0103ri pe s\u0103pt\u0103m\u00e2n\u0103. Utilizarea pachetelor \u00eenvechite \u0219i a proiectelor abandonate ca dependen\u021be este asociat\u0103 cu riscul de a avea vulnerabilit\u0103\u021bi necorectate, \u00een special av\u00e2nd \u00een vedere practica unor dezvoltatori de a remedia discret vulnerabilit\u0103\u021bile f\u0103r\u0103 a atribui un identificator CVE \u0219i f\u0103r\u0103 a sublinia explicit rezolvarea problemei.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Aqua Security \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438 \u043e 50 \u0442\u044b\u0441\u044f\u0447\u0430\u0445 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM. 7500 (15%) \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u043c\u0438 \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438 \u0438 \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0432\u0448\u0438\u043c\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c\u0438. \u0414\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441\u0440\u0435\u0434\u0438 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0441\u0432\u043e\u0451\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0435, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0430 \u0443\u0442\u0438\u043b\u0438\u0442\u0430 Dependency-Deprecated-Checker, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 MIT. \u0412 4100 (8.2%) \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u043d\u044b\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":113036,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-113035","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd478.2% dintre cele mai populare desc\u0103rc\u0103ri din NPM provin din pachete \u00eenvechite | ProHoster","description":"Cercet\u0103torii de la Aqua Security au publicat rezultatele unei analize a statisticilor despre cele 50.000 de cele mai desc\u0103rcate pachete din depozitul NPM.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/8-2-naibolee-populyarnyh-zagruzok-v-npm-prihoditsya-na-ustarevshie-pakety","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd478.2% \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0432 NPM \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u044b | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Aqua Security \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438 \u043e 50 \u0442\u044b\u0441\u044f\u0447\u0430\u0445 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/8-2-naibolee-populyarnyh-zagruzok-v-npm-prihoditsya-na-ustarevshie-pakety","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-21T21:28:08+00:00","article:modified_time":"2024-01-21T21:28:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/113035","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=113035"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/113035\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/113036"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=113035"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=113035"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=113035"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}