{"id":182580,"date":"2026-07-09T22:53:44","date_gmt":"2026-07-09T20:53:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-npm-12-0-po-umolchaniyu-otklyuchyon-zapusk-skriptov-pri-ustanovke-paketov"},"modified":"2026-07-09T22:53:44","modified_gmt":"2026-07-09T20:53:44","slug":"v-npm-12-0-po-umolchaniyu-otklyuchyon-zapusk-skriptov-pri-ustanovke-paketov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-npm-12-0-po-umolchaniyu-otklyuchyon-zapusk-skriptov-pri-ustanovke-paketov","title":{"rendered":"N\u00eb NPM 12.0, nga e para \u00ebsht\u00eb ndaluar ekzekutimi i skripteve gjat\u00eb instalimit t\u00eb paketave","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Versioni e re t\u00eb menaxherit t\u00eb paketave NPM 12.0, i p\u00ebrfshir\u00eb n\u00eb shp\u00ebrndarjen e Node.js q\u00eb p\u00ebrdoret p\u00ebr shp\u00ebrndarjen e moduleve n\u00eb gjuh\u00ebn JavaScript. Versioni i ri \u00ebsht\u00eb i njohur p\u00ebr pezullimin e ekzekutimit t\u00eb skriptave gjat\u00eb instalimit t\u00eb pakove. Ky ndryshim pritet t\u00eb b\u00ebj\u00eb m\u00eb t\u00eb v\u00ebshtir\u00eb realizimin e sulmeve p\u00ebrmes komprometimit t\u00eb var\u00ebsive dhe t\u00eb ngadal\u00ebsoj\u00eb p\u00ebrhapjen e krimbave t\u00eb aktivizuar nga skriptat e instalimit. <\/p>\n
P\u00ebr t\u00eb ndaluar auto-ekzekutimin e skripteve t\u00eb caktuara n\u00eb package.json p\u00ebrmes parametrave preinstall, install ose postinstall, cil\u00ebsimi allowScripts \u00ebsht\u00eb vendosur n\u00eb \"off\" si parazgjedhje. Ekzekutimi i till\u00eb i skripteve, si dhe fillimi i kompilimit t\u00eb kodit C\/C++ nga utilitari node-gyp n\u00ebse n\u00eb paket\u00eb ka nj\u00eb skedar binding.gyp, tani b\u00ebhet vet\u00ebm me nj\u00eb udh\u00ebzim t\u00eb qart\u00eb nga p\u00ebrdoruesi. P\u00ebrve\u00e7 k\u00ebsaj, parametrat \"--allow-git\" dhe \"--allow-remote\" tani jan\u00eb vendosur n\u00eb \"none\" si parazgjedhje, q\u00eb ndalon shkarkimin automatik t\u00eb var\u00ebsive nga depozit\u00eb Git dhe lidhje direkte n\u00eb faqe me arkiva tar. <\/p>\n
P\u00ebr t\u00eb organizuar ekzekutimin e skripteve t\u00eb instalimit, duhet p\u00ebrdorur komanda \"npm approve-scripts\", si argument t\u00eb cil\u00ebs i kalohen emrat e pakave t\u00eb besueshme, ose opsioni \"--all\" p\u00ebr t'u dh\u00ebn\u00eb leje t\u00eb gjitha pakave. P\u00ebr paketat e dyshimta rekomandohet t\u00eb ekzekutohet komanda \"npm approve-scripts --allow-scripts-pending\", e cila do t\u00eb nxjerr\u00eb nj\u00eb list\u00eb t\u00eb skripteve q\u00eb pretendojn\u00eb t\u00eb ekzekutohen. Pas rishikimit t\u00eb k\u00ebtyre skripteve, ato mund t\u00eb lejohet me komand\u00ebn \"npm approve-scripts\" dhe t\u00eb shtohen n\u00eb list\u00ebn e bardh\u00eb n\u00eb package.json. <\/p>\n
P\u00ebrve\u00e7 k\u00ebsaj, \u00ebsht\u00eb njoftuar ndalimi i p\u00ebrdorimit t\u00eb GAT-token\u00ebve t\u00eb aksesit (Granular Access Tokens) n\u00eb depozit\u00ebn NPM, t\u00eb cilat jan\u00eb konfiguruar p\u00ebr t\u00eb kryer veprime pa verifikimin me dy faktor\u00eb (2FA). Duke filluar nga gushti, k\u00ebto tokene pa nj\u00eb konfirmim manual t\u00eb veprimeve nuk do t\u00eb lejojn\u00eb t\u00eb kryhen operacione t\u00eb tilla si krijimi ose fshirja e tokeneve, ndryshimi i profilit, fjal\u00ebkalimit ose emailit, konfigurimi i verifikimit me dy faktor\u00eb, gjenerimi i kodave t\u00eb rikuperimit, ndryshimi i t\u00eb drejtave t\u00eb aksesit dhe menaxhimi i shoq\u00ebruesve. <\/p>\n
N\u00eb janar 2027, pritet t\u00eb ndalohet publikimi direkt i paketave q\u00eb p\u00ebrdorin tokene q\u00eb anashkalojn\u00eb 2FA. Megjithat\u00eb, paketat do t\u00eb mund t\u00eb publikohen n\u00eb seksionin staging, n\u00eb t\u00eb cilin ato do t\u00eb q\u00ebndrojn\u00eb deri n\u00eb miratimin manual t\u00eb publikimit nga nj\u00eb shoq\u00ebrues. Pas miratimit manual, paketat e publikuara do t\u00eb jen\u00eb t\u00eb disponueshme p\u00ebr instalim nga p\u00ebrdoruesit. <\/p>\n
P\u00ebr publikimin automatik, sugjerohet t\u00eb p\u00ebrdoret mekanizmi \"Trusted Publishers\", i bazuar n\u00eb p\u00ebrdorimin e standardit OpenID Connect (OIDC) dhe tokend e autentifikimit me koh\u00eb t\u00eb kufizuar, me t\u00eb cilat shk\u00ebmbehen sh\u00ebrbimet e jashtme dhe katalogu i pakave p\u00ebr t\u00eb konfirmuar operacionin e publikimit t\u00eb paket\u00ebs n\u00eb vend t\u00eb p\u00ebrdorimit t\u00eb fjal\u00ebkalimeve tradicionale ose tokend e qasjes s\u00eb p\u00ebrhershme n\u00eb API. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"