{"id":113035,"date":"2024-01-21T23:28:08","date_gmt":"2024-01-21T21:28:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/8-2-naibolee-populyarnyh-zagruzok-v-npm-prihoditsya-na-ustarevshie-pakety"},"modified":"2024-01-21T23:28:08","modified_gmt":"2024-01-21T21:28:08","slug":"8-2-naibolee-populyarnyh-zagruzok-v-npm-prihoditsya-na-ustarevshie-pakety","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/8-2-naibolee-populyarnyh-zagruzok-v-npm-prihoditsya-na-ustarevshie-pakety","title":{"rendered":"8.2% e shkarkimeve m\u00eb t\u00eb populluara n\u00eb NPM p\u00ebrb\u00ebhet nga paketa t\u00eb l\u00ebna pas dore","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
K\u00ebrkuesit nga kompania Aqua Security publikuan rezultatet e analiz\u00ebs s\u00eb statistikave mbi 50,000 paketat m\u00eb t\u00eb shkarkuara n\u00eb repository-n NPM. 7,500 (15%) nga paketat m\u00eb t\u00eb shkarkuara u zbuluan se ishin t\u00eb lidhura me paketa t\u00eb vjetra dhe projekte q\u00eb kishin pushuar s\u00eb ekzistuari. P\u00ebr t\u00eb thjeshtuar p\u00ebrcaktimin e paketimeve t\u00eb vjetra midis var\u00ebsive q\u00eb p\u00ebrdoren n\u00eb projektet e tyre, u propozua nj\u00eb utilitar i quajtur Dependency-Deprecated-Checker, i publikuar n\u00ebn licenc\u00ebn MIT. <\/p>\n
N\u00eb 4,100 (8.2%) t\u00eb paketave t\u00eb shqyrtuara n\u00eb zinxhirin e var\u00ebsive, u identifikuan paketa q\u00eb ishin shpallur zyrtarisht n\u00eb NPM si t\u00eb vjetra ose t\u00eb lidhura me projekte t\u00eb vjetra (p\u00ebr shembull, paketa request \u00ebsht\u00eb sh\u00ebnuar si e vjet\u00ebr, por vazhdon t\u00eb p\u00ebrdoret si nj\u00eb var\u00ebsi direkte nga 55,000 paketa). 2,300 (4.6%) paketat jan\u00eb t\u00eb lidhura me repozitor\u00eb n\u00eb GitHub, t\u00eb cil\u00ebt jan\u00eb kaluar n\u00eb statusin arkivor (zhvillimi \u00ebsht\u00eb ndalur, p\u00ebr shembull, repozitorin e paket\u00ebs through \u00ebsht\u00eb sh\u00ebnuar si arkivor, por p\u00ebrdoret si var\u00ebsi direkte nga 3,000 paketa). 1,100 (2.2%) paketat referojn\u00eb repozitor\u00eb q\u00eb nuk ekzistojn\u00eb m\u00eb, me aksesin n\u00eb t\u00eb cil\u00ebt kthehet nj\u00eb gabim 404. 3,100 (6.2%) paketat nuk p\u00ebrmbajn\u00eb informacion mbi repozitorin.
<\/center> <\/p>\n
N\u00eb terma absolut\u00eb, p\u00ebrhapja e paketave t\u00eb vjetra dhe paketimeve pa lidhje me repozitor\u00ebt n\u00eb NPM \u00ebsht\u00eb ekstrapoluar n\u00eb rreth 2.1 miliard prej shkarkimeve n\u00eb jav\u00eb. P\u00ebrdorimi i paketave t\u00eb vjetra dhe projekteve q\u00eb kan\u00eb mbetur pa mb\u00ebshtetje si var\u00ebsi \u00ebsht\u00eb i lidhur me rreziqe q\u00eb kan\u00eb t\u00eb b\u00ebjn\u00eb me pranin\u00eb e vulnerabiliteteve t\u00eb patrajtuara, sidomos duke pasur parasysh praktik\u00ebn q\u00eb disa zhvillues e zbatojn\u00eb p\u00ebr eliminimin e heshtur t\u00eb vulnerabiliteteve pa caktuar nj\u00eb identifikues CVE dhe pa v\u00ebn\u00eb theks t\u00eb duksh\u00ebm mbi zgjidhjen e problemit. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
![\"8.2%](\"\/wp-content\/uploads\/2024\/01\/f9216a87806d08312ea3224e1ba047ea.png\")
<\/center> <\/p>\n