{"id":113035,"date":"2024-01-21T23:28:08","date_gmt":"2024-01-21T21:28:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/8-2-naibolee-populyarnyh-zagruzok-v-npm-prihoditsya-na-ustarevshie-pakety"},"modified":"2024-01-21T23:28:08","modified_gmt":"2024-01-21T21:28:08","slug":"8-2-naibolee-populyarnyh-zagruzok-v-npm-prihoditsya-na-ustarevshie-pakety","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/8-2-naibolee-populyarnyh-zagruzok-v-npm-prihoditsya-na-ustarevshie-pakety","title":{"rendered":"8.2% e shkarkimeve m\u00eb t\u00eb njohura n\u00eb NPM vijn\u00eb nga pakot e vjetra","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
K\u00ebrkuesit nga kompania Aqua Security publikuan rezultatet e analiz\u00ebs statistikore p\u00ebr 50 mij\u00eb paketat m\u00eb t\u00eb shkarkuara n\u00eb depozit\u00ebn NPM. 7500 (15%) nga paketat m\u00eb t\u00eb shkarkuara ishin t\u00eb lidhura me paketa t\u00eb vjetra dhe projekte q\u00eb kan\u00eb ndaluar ekzistenc\u00ebn. P\u00ebr t\u00eb thjeshtuar identifikimin e paketave t\u00eb vjetra midis var\u00ebsive t\u00eb p\u00ebrdorura n\u00eb projektin tuaj, \u00ebsht\u00eb propozuar nj\u00eb mjet i quajtur Dependency-Deprecated-Checker, i publikuar n\u00ebn licenc\u00ebn MIT. <\/p>\n
N\u00eb 4100 (8.2%) nga paketat e shqyrtuara n\u00eb zinxhirin e var\u00ebsive jan\u00eb identifikuar paketa q\u00eb jan\u00eb shpallur zyrtarisht t\u00eb vjetra n\u00eb NPM ose jan\u00eb t\u00eb lidhura me projekte t\u00eb vjetra (p\u00ebr shembull, paketa request \u00ebsht\u00eb sh\u00ebnuar si e vjet\u00ebr, por vazhdon t\u00eb p\u00ebrdoret si var\u00ebsi direkte nga 55000 paketa). 2300 (4.6%) paketa jan\u00eb t\u00eb lidhura me depozita n\u00eb GitHub q\u00eb jan\u00eb kaluar n\u00eb arkiv (zhvillimi i ndalur, p\u00ebr shembull, depozitimi i paket\u00ebs through \u00ebsht\u00eb sh\u00ebnuar si arkiv, por p\u00ebrdoret si var\u00ebsi direkte nga 3000 paketa). 1100 (2.2%) paketa referojn\u00eb n\u00eb depozita q\u00eb tashm\u00eb nuk ekzistojn\u00eb, ku k\u00ebrkesa p\u00ebr to shkakton nj\u00eb gabim 404. 3100 (6.2%) paketa nuk p\u00ebrmbajn\u00eb informacion mbi depozit\u00ebn.
<\/center> <\/p>\n
N\u00eb shprehjen absolute, p\u00ebrhapja e paketave t\u00eb vjetra dhe paketave pa lidhje me depozita n\u00eb NPM \u00ebsht\u00eb ekstrapoluar rreth 2.1 miliard\u00eb shkarkime n\u00eb jav\u00eb. P\u00ebrdorimi i paketave t\u00eb vjetra dhe projekteve t\u00eb braktisura si var\u00ebsi \u00ebsht\u00eb i lidhur me rrezikun e pranis\u00eb s\u00eb vulave t\u00eb paparapara, ve\u00e7an\u00ebrisht p\u00ebr shkak t\u00eb praktik\u00ebs s\u00eb disa zhvilluesve p\u00ebr t\u00eb fshehur eliminimin e vulave pa caktimin e nj\u00eb identifikatori CVE dhe pa e theksuar hapur zgjidhjen e problemit. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
![\"8.2%](\"\/wp-content\/uploads\/2024\/01\/f9216a87806d08312ea3224e1ba047ea.png\")
<\/center> <\/p>\n