{"id":104717,"date":"2022-07-27T09:36:57","date_gmt":"2022-07-27T07:36:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-paketnogo-menedzhera-npm-8-15-s-podderzhkoj-lokalnoj-proverki-czelostnosti-paketov"},"modified":"2022-07-27T09:36:57","modified_gmt":"2022-07-27T07:36:57","slug":"vypusk-paketnogo-menedzhera-npm-8-15-s-podderzhkoj-lokalnoj-proverki-czelostnosti-paketov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/vypusk-paketnogo-menedzhera-npm-8-15-s-podderzhkoj-lokalnoj-proverki-czelostnosti-paketov","title":{"rendered":"L\u00ebshimi i menaxherit t\u00eb paketave NPM 8.15 me mb\u00ebshtetje p\u00ebr kontrollin lokal t\u00eb integritetit t\u00eb pakove","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Kompania GitHub shpalli l\u00ebshimin e menaxherit t\u00eb paketave NPM 8.15, i cili \u00ebsht\u00eb i p\u00ebrfshir\u00eb n\u00eb shp\u00ebrndarjen e Node.js dhe p\u00ebrdoret p\u00ebr shp\u00ebrndarjen e moduleve n\u00eb gjuh\u00ebn JavaScript. Raportohet se \u00e7do dit\u00eb ngarkohen m\u00eb shum\u00eb se 5 miliard paketash p\u00ebrmes NPM. <\/p>\n
Ndryshimet kryesore: <\/p>\n
\n
\u00cbsht\u00eb shtuar nj\u00eb komand\u00eb e re \u00abaudit signatures\u00bb p\u00ebr kryerjen e auditi lokal t\u00eb integritetit t\u00eb pakove t\u00eb instaluara, e cila nuk k\u00ebrkon manipulime me utilitat PGP. Mekanizmi i ri i verifikimit bazohet n\u00eb p\u00ebrdorimin e n\u00ebnshkrimeve digjitale sipas algoritmit ECDSA dhe p\u00ebrdorimin e HSM (Hardware Security Module) p\u00ebr menaxhimin e \u00e7el\u00ebsave. T\u00eb gjitha paketat n\u00eb depozitat NPM tashm\u00eb jan\u00eb n\u00ebnshkruar nga e para duke p\u00ebrdorur skem\u00ebn e re.\n
\u00cbsht\u00eb shpallur e disponueshme p\u00ebr p\u00ebrdorim t\u00eb gjer\u00eb autentifikimi i zgjeruar me dy faktor\u00eb. \u00cbsht\u00eb shtuar nj\u00eb proces i thjeshtuar p\u00ebr hyrje dhe publikim n\u00eb npm CLI, duke funksionuar p\u00ebrmes shfletuesit. Kur specifikohet opsioni \u00ab\u2014auth-type=web\u00bb p\u00ebr autentifikimin e llogaris\u00eb, hapet nj\u00eb nd\u00ebrfaqe web n\u00eb shfletues. Parametrat e sesionit mbahen mend. P\u00ebr t\u00eb vendosur sesi duhet t\u00eb konfirmohet emaili me kode nj\u00ebher\u00ebsh (OTP), dhe, p\u00ebr t\u00eb kryer operacione n\u00eb sesionet tashm\u00eb t\u00eb vendosura, mjafton t\u00eb konfirmohet faza e dyt\u00eb e autentifikimit me dy faktor\u00eb. Ofron nj\u00eb modalitet mbajtjeje q\u00eb lejon kryerjen e operacioneve t\u00eb publikimit nga t\u00eb nj\u00ebjtat IP dhe token p\u00ebr 5 minuta pa k\u00ebrkesa shtes\u00eb p\u00ebr autentifikimin me dy faktor\u00eb.\n
Ofrimi i mund\u00ebsis\u00eb p\u00ebr lidhjen e llogarive GitHub dhe Twitter me NPM, duke lejuar lidhjen me NPM p\u00ebrmes llogarive n\u00eb GitHub dhe Twitter. <\/ul>\n
N\u00eb planet e ardhshme p\u00ebrmendet p\u00ebrfshirja e autentifikimit t\u00eb dyfisht\u00eb t\u00eb detyruesh\u00ebm p\u00ebr llogarit\u00eb q\u00eb lidhen me paketat q\u00eb kan\u00eb m\u00eb shum\u00eb se 1 milion shkarkime n\u00eb jav\u00eb ose kan\u00eb m\u00eb shum\u00eb se 500 paketa t\u00eb varura. Momentalisht, autentifikimi i dyfisht\u00eb i detyruesh\u00ebm aplikohet vet\u00ebm p\u00ebr 500 paketat m\u00eb t\u00eb njohura. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"