I ia wiki, ka matawaihia e ā mātou pūnaha kimi pūmanawa kino ngā mano tini o ngā mōkihi hou me ngā mōkihi kua whakahoutia puta noa i ngā rēhita tūmatanui pēnei i te npm me te PyPI.
He rerekē tēnei wiki.
I tua atu i te whakaū 40+ ngā mōkihi kino, i whakahaerehia e tā mātou tīma rangahau he rangahau hōhonu ki:
- He kaupapa tahae mōhiohio hou kua huraina e tukino ana i te pūnaha npm
- He marau kino e aro ana ki te mekameka tuku taonga whare pukapuka WhatsApp a Baileys
Ehara i te mea he mahi patopato noa iho ēnei. I roto i ēnei take e rua he mahi tukino i ngā tohu me ngā tikanga tahae wātū ka taea te pā ki ngā taiao kaiwhakawhanake tūturu.
Ko tēnei tirohanga ā-wiki he wāhanga o tā mātou mahi tonu Whakarāpopototanga Waehere Kino, te wāhi e whakamanahia ai e mātou ngā tūmomo riri hou, ā, e whakarato ana hoki i ngā mōhiohio mahi hei āwhina i ngā tīma DevSecOps ki te tiaki i ā rātou pipelinei mua i te puta mai o te kino.
Me wetewete tātou i ngā mea i kitea e tātou i tēnei wiki, me ngā take i hiranga ai.
| Te haukori | mōkī | Te rā |
|---|---|---|
| npm | ngā taputapu-awa:2.95.0 | Feb 27, 2026 |
| npm | ngā taputapu-awa:2.96.0 | Feb 27, 2026 |
| npm | ngā taputapu-awa:2.97.0 | Feb 27, 2026 |
| npm | ngā taputapu-awa:2.99.0 | Feb 27, 2026 |
| npm | ngā taputapu-awa:2.98.0 | Feb 27, 2026 |
| npm | ngā taputapu-awa:3.99.0 | Feb 27, 2026 |
| npm | tauira maramatakatakahanga:0.0.5 | MK 02, 2026 |
| npm | tauirareactnative76:0.0.8 | MK 02, 2026 |
| npm | tauira maramatakatakahanga:0.0.10 | MK 02, 2026 |
| npm | whakarewa-pōuri-js:199.99.102 | MK 03, 2026 |
| npm | whakarewa-pōuri-js:199.99.103 | MK 03, 2026 |
| npm | consolelofy:1.3.0 | MK 03, 2026 |
| npm | whakarewa-pōuri-js:199.99.106 | MK 03, 2026 |
| npm | securefiles-common:1.0.3 | Feb 28, 2026 |
| npm | nuget-task-common:1.0.4 | Feb 28, 2026 |
| npm | woltpickerapp:40.6.2 | MK 02, 2026 |
| npm | xrpl-dev-portal:1.0.3 | MK 03, 2026 |
| pīpi | isb:1.0.0 | MK 04, 2026 |
| pīpi | myproject-bola:1.0.0 | MK 03, 2026 |
| npm | ag-connect:1.0.0 | Feb 28, 2026 |
| npm | ag-connect:1.0.1 | Feb 28, 2026 |
| npm | ag-connect:1.1.0 | Feb 28, 2026 |
| npm | ag-connect:1.2.0 | Feb 28, 2026 |
| npm | ag-connect:1.3.0 | Feb 28, 2026 |
| npm | ag-connect:1.3.1 | Feb 28, 2026 |
| npm | pōkai-kino:1.0.2 | MK 02, 2026 |
| npm | piyush_test_vadapav:1.0.1 | MK 01, 2026 |
| npm | tāruarua-ci:1.0.0 | MK 02, 2026 |
| npm | tāruarua-ci:1.0.1 | MK 02, 2026 |
| npm | ng-vzbootstrap:1.0.3 | MK 03, 2026 |
| npm | pōkai-kino:1.0.6 | MK 02, 2026 |
| npm | pdfjs-dist-v5:100.21.1 | MK 03, 2026 |
| npm | pino-sdk:9.9.0 | MK 04, 2026 |
| npm | tauira-whakamātautau-haumarutanga-aio-erk1ny:1.0.0 | MK 04, 2026 |
| npm | pino-sdk-v2:9.9.0 | MK 04, 2026 |
| npm | nf-console:99.0.0 | MK 04, 2026 |
| npm | nf-console:99.0.1 | MK 04, 2026 |
| npm | yaml-manifest-utils-mynarratorai:2.0.0 | MK 05, 2026 |
| npm | yaml-manifest-utils-mynarratorai:4.0.0 | MK 05, 2026 |
| npm | ecto-module:99.0.0 | MK 05, 2026 |
| npm | pū-pū-kehua:9999.0.0 | MK 05, 2026 |
| npm | siren-lament:9999.0.0 | MK 05, 2026 |
| npm | ect-472839:9999.0.0 | MK 05, 2026 |
Tiakina ō Whakawhirinakitanga Pūtake Tuwhera mai i ngā Whakaraeraetanga me ngā Waehere Kino
Whakaitihia ngā mōrearea me te tiaki i ō taupānga mai i ngā mōkihi kino me Te Kitenga Pūmanawa Kino Wā Moata a Xygeni. Whakaritea ngā ngoikoretanga tino hira, ā, whakatikahia hoki. Ka tukuna e tā mātou otinga whānui te aroturukitanga wā-tūturu o ō whakawhirinakitanga hei kimi me te whakaiti i ngā tūmomo riri i mua i te pānga ki tō pūmanawa.
He mea nui te whakahaere i ngā wāhanga tuwhera-pūtake i roto i te ao whanaketanga pūmanawa o nāianei nā te pikinga ake o ngā ngoikoretanga me ngā tūmomo mōrearea waehere kino. Nā Xygeni Open Source Security Ka matawaihia, ka āraihia hoki e te otinga ngā mōkihi kino i te wā e whakaputaina ana, ka whakaitihia te mōrearea o te pūmanawa kino me ngā ngoikoretanga ki roto i ō pūnaha. Ka kapi tā mātou aroturuki whānui i ngā rēhita tūmatanui maha, kia mōhio ai kei te tirotirohia ngā whakawhirinakitanga katoa mō te haumaru me te pono. Ka whakarei ake a Xygeni i te kaha o tō rōpū ki te pupuri i ngā kaupapa pūmanawa haumaru me te pono mā te whakarite i ngā take nui me te whakahaere i ngā tukanga whakatikatika māmā.
Ka whakamahia e Xygeni ngā tikanga maha-paparanga hei aukati i te waehere kino i mua i te horapa. Tuatahi, ka kitea e te tātari waehere tūmau ngā tauira whakapōrearea, ngā kawenga huna, me te tukino i te tuhinga. Hei tāpiri, ka tātarihia e te pouaka onepu whanonga te tāutanga hooks, ngā whakahau wā-oma, me ngā mahi tinihanga pumau. Hei tāpiri, ka tautuhia e te kimi ako mīhini ngā momo pūmanawa kino npm kore-rā me ngā pūmanawa kino pypi i ngaro i ngā matawai waitohu. Hei whakamutunga, ka aroturukihia e te Pūnaha Whakatūpato Moata ngā putunga tūmatanui i te wā tūturu, ka whakamana i ngā kitenga, ā, ka whakatūpato tonu i ngā tīma DevOps.
Nā tēnei huinga, ka whakarite kia whiwhi ngā kaiwhakawhanake i ngā mōhiohio tere, whai hua hoki kua whakauruhia tika ki roto CI/CD nga mahi mahi.
He aha ngā take me aro nui ai ngā kaiwhakawhanake ki ngā mōkihi npm kino
Kāore e roa ka tatari ngā tūmomo riri hou mō te wā whakahaere. Hei tauira, he maha ngā wā ka whakahaerehia ngā mōkihi npm kino i te wā tāutanga, engari ko ngā mōkihi kino pypi e huna ana i te putanga tohu, i ngā tatau muri rānei. Ngā Kaiwhakaeke:
- Tahurihia ngā putunga tūmataiti GitHub ki te tūmatanui hei tārua i a rātou.
- Wetewetehia ngā taipitopito tuakiri me ngā mea ngaro mā te whakamahi i ngā kawenga kua whakamunatia.
- Whakamahia ngā uta JavaScript kua huna hei whakatinana i te ransomware, i ngā whatunga karetao rānei.
Ina hoki, i piki ake ngā mōkihi pūmanawa tuwhera kino mā te 156% i roto i te tau kotahi. Nō reira, ka hinga ngā tīma e whakawhirinaki ana ki ngā whāngai whakaroa, ki ngā matawai taketake rānei ki muri.
Ngā mea e aroturukihia ana e tēnei Pūrongo Pūmanawa Kino i roto i te npm me te PyPI
Ko tēnei whakarāpopototanga te pokapū matua mō:
- Ngā mōkihi npm kino kua whakaūngia
- Ngā mōkihi kino pypi kua whakaūtia
- Te kimi i ngā waehere kino e hangai ana ki ngā whanonga
- Ngā aituā kua whakaūtia e te rēhita
- Ngā whakarāpopototanga o ngā pūrongo mō ngā pūmanawa kino ia wiki, ia marama hoki
- Te rārangi huringa hītori o ngā kitenga katoa o ngā pūmanawa kino npm me ngā pūmanawa kino pypi
Arā, he tohutoro kotahi tēnei. Ka whakahōu te tīma rangahau i Xygeni i tēnei whārangi ia wiki me ngā hononga ki ngā tātaritanga hangarau katoa me ngā IOC GitHub.
Me pēhea te tiaki i ngā mōkihi npm kino me te pūmanawa kino PyPI
Nā te mea kei te piki haere te mōrearea nei, me whai parepare pakari ngā whakahaere:
- Whakaūtia ngā tāutanga kōnae-raka anake (
npm ci) i roto i CI/CD. - Hei tāpiritanga, ka tāutahia ngā whakawhirinakitanga matawai i mua i te whakamahi i te Mīhini Whakatūpato Moata a Xygeni.
- Hei tāpiritanga, ka hangaia te poraka i runga i ngā tohu waehere kino mā te whakamahi i Guardrails.
- Hanga SBOMhei whai i ngā whakawhirinakitanga ā-korekore me te whakamahi i ngā kaupapa here.
- Heoi anō, me whakangungu ngā kaiwhakawhanake kia kite i ngā hapa pato, ngā hapa whakapoauau, me ngā tuhinga tāutanga whakapae.
Whakamātauria ngā Utauta Kimi Pūmanawa Kino a Xygeni
Ka tukuna e Xygeni:
- Te kimi wā-tūturu i ngā waehere kino, tae atu ki ngā tatau muri, ngā pūmanawa torotoro, me te pūmanawa utu-kore.
- He rerekē ki ngā matawai taketake, ko te tātaritanga puta noa i te npm, PyPI, Maven, NuGet, Tuhinga o mua, Me te ake.
- Ārai hanga aunoa ina tautuhia te mōrearea e te pūrongo pūmanawa kino.
- Ngā māramatanga mō te whakamahinga kino, ngā arowhai ingoa o te kaiwhakahaere, me te kimi i ngā āhuatanga rerekē.
