npm-paketinhallintajärjestelmän käytännön ongelmat ja riskit

Tässä kandidaatintutkielmassa avataan npm-paketinhallintajärjestelmän toimintaa ja siihen liittyviä riskejä ja ongelmia. Näihin riskeihin kuuluvat muun muassa pakettien ylläpitäjien huolimattomuudesta johtuvat haavoittuvuudet, sekä haavoittuvuuksien leviämistä edesauttavat tekijät, kuten laaja vanhe...

Full description

Bibliographic Details
Main Author: Erho, Joonas
Other Authors: Informaatioteknologian tiedekunta, Faculty of Information Technology, Informaatioteknologia, Information Technology, Jyväskylän yliopisto, University of Jyväskylä
Format: Bachelor's thesis
Language:fin
Published: 2023
Subjects:
Online Access: https://jyx.jyu.fi/handle/123456789/87900
_version_ 1826225797726208000
author Erho, Joonas
author2 Informaatioteknologian tiedekunta Faculty of Information Technology Informaatioteknologia Information Technology Jyväskylän yliopisto University of Jyväskylä
author_facet Erho, Joonas Informaatioteknologian tiedekunta Faculty of Information Technology Informaatioteknologia Information Technology Jyväskylän yliopisto University of Jyväskylä Erho, Joonas Informaatioteknologian tiedekunta Faculty of Information Technology Informaatioteknologia Information Technology Jyväskylän yliopisto University of Jyväskylä
author_sort Erho, Joonas
datasource_str_mv jyx
description Tässä kandidaatintutkielmassa avataan npm-paketinhallintajärjestelmän toimintaa ja siihen liittyviä riskejä ja ongelmia. Näihin riskeihin kuuluvat muun muassa pakettien ylläpitäjien huolimattomuudesta johtuvat haavoittuvuudet, sekä haavoittuvuuksien leviämistä edesauttavat tekijät, kuten laaja vanhentuneiden tai triviaalien pakettien käyttö. Tutkielmassa pohditaan myös keinoja ennaltaehkäistä ja ratkaista edellämainittuja ongelmia. In this bachelor’s thesis the general procedures and features of the npm package manager are explained, with focus on the possible risks and other issues pertaining to the usage of npm. These risks include the security vulnerabilites due to human errors made by package administrators, as well as factors that help spread these vulnerabilities, including the usage of deprecated or trivial packages. In this thesis, we also discuss methods to prevent or fix these issues.
first_indexed 2024-09-11T08:52:51Z
format Kandityö
free_online_boolean 1
fullrecord [{"key": "dc.contributor.advisor", "value": "Lakanen, Antti-Jussi", "language": "", "element": "contributor", "qualifier": "advisor", "schema": "dc"}, {"key": "dc.contributor.author", "value": "Erho, Joonas", "language": "", "element": "contributor", "qualifier": "author", "schema": "dc"}, {"key": "dc.date.accessioned", "value": "2023-06-19T06:54:28Z", "language": null, "element": "date", "qualifier": "accessioned", "schema": "dc"}, {"key": "dc.date.available", "value": "2023-06-19T06:54:28Z", "language": null, "element": "date", "qualifier": "available", "schema": "dc"}, {"key": "dc.date.issued", "value": "2023", "language": "", "element": "date", "qualifier": "issued", "schema": "dc"}, {"key": "dc.identifier.uri", "value": "https://jyx.jyu.fi/handle/123456789/87900", "language": null, "element": "identifier", "qualifier": "uri", "schema": "dc"}, {"key": "dc.description.abstract", "value": "T\u00e4ss\u00e4 kandidaatintutkielmassa avataan npm-paketinhallintaj\u00e4rjestelm\u00e4n toimintaa ja siihen liittyvi\u00e4 riskej\u00e4 ja ongelmia. N\u00e4ihin riskeihin kuuluvat muun muassa pakettien\nyll\u00e4pit\u00e4jien huolimattomuudesta johtuvat haavoittuvuudet, sek\u00e4 haavoittuvuuksien levi\u00e4mist\u00e4 edesauttavat tekij\u00e4t, kuten laaja vanhentuneiden tai triviaalien pakettien k\u00e4ytt\u00f6. Tutkielmassa pohditaan my\u00f6s keinoja ennaltaehk\u00e4ist\u00e4 ja ratkaista edell\u00e4mainittuja ongelmia.", "language": "fi", "element": "description", "qualifier": "abstract", "schema": "dc"}, {"key": "dc.description.abstract", "value": "In this bachelor\u2019s thesis the general procedures and features of the npm package\nmanager are explained, with focus on the possible risks and other issues pertaining to the\nusage of npm. These risks include the security vulnerabilites due to human errors made by\npackage administrators, as well as factors that help spread these vulnerabilities, including the\nusage of deprecated or trivial packages. In this thesis, we also discuss methods to prevent or\nfix these issues.", "language": "en", "element": "description", "qualifier": "abstract", "schema": "dc"}, {"key": "dc.description.provenance", "value": "Submitted by Paivi Vuorio (paelvuor@jyu.fi) on 2023-06-19T06:54:28Z\nNo. of bitstreams: 0", "language": "en", "element": "description", "qualifier": "provenance", "schema": "dc"}, {"key": "dc.description.provenance", "value": "Made available in DSpace on 2023-06-19T06:54:28Z (GMT). No. of bitstreams: 0\n Previous issue date: 2023", "language": "en", "element": "description", "qualifier": "provenance", "schema": "dc"}, {"key": "dc.format.extent", "value": "25", "language": "", "element": "format", "qualifier": "extent", "schema": "dc"}, {"key": "dc.language.iso", "value": "fin", "language": null, "element": "language", "qualifier": "iso", "schema": "dc"}, {"key": "dc.rights", "value": "In Copyright", "language": "en", "element": "rights", "qualifier": null, "schema": "dc"}, {"key": "dc.subject.other", "value": "paketinhallintaj\u00e4rjestelm\u00e4", "language": "", "element": "subject", "qualifier": "other", "schema": "dc"}, {"key": "dc.subject.other", "value": "npm", "language": "", "element": "subject", "qualifier": "other", "schema": "dc"}, {"key": "dc.subject.other", "value": "Node.js", "language": "", "element": "subject", "qualifier": "other", "schema": "dc"}, {"key": "dc.subject.other", "value": "riippuvuussuhteet", "language": "", "element": "subject", "qualifier": "other", "schema": "dc"}, {"key": "dc.subject.other", "value": "semanttinen versiointi", "language": "", "element": "subject", "qualifier": "other", "schema": "dc"}, {"key": "dc.title", "value": "npm-paketinhallintaj\u00e4rjestelm\u00e4n k\u00e4yt\u00e4nn\u00f6n ongelmat ja riskit", "language": "", "element": "title", "qualifier": null, "schema": "dc"}, {"key": "dc.type", "value": "bachelor thesis", "language": null, "element": "type", "qualifier": null, "schema": "dc"}, {"key": "dc.identifier.urn", "value": "URN:NBN:fi:jyu-202306193955", "language": "", "element": "identifier", "qualifier": "urn", "schema": "dc"}, {"key": "dc.type.ontasot", "value": "Bachelor's thesis", "language": "en", "element": "type", "qualifier": "ontasot", "schema": "dc"}, {"key": "dc.type.ontasot", "value": "Kandidaatinty\u00f6", "language": "fi", "element": "type", "qualifier": "ontasot", "schema": "dc"}, {"key": "dc.contributor.faculty", "value": "Informaatioteknologian tiedekunta", "language": "fi", "element": "contributor", "qualifier": "faculty", "schema": "dc"}, {"key": "dc.contributor.faculty", "value": "Faculty of Information Technology", "language": "en", "element": "contributor", "qualifier": "faculty", "schema": "dc"}, {"key": "dc.contributor.department", "value": "Informaatioteknologia", "language": "fi", "element": "contributor", "qualifier": "department", "schema": "dc"}, {"key": "dc.contributor.department", "value": "Information Technology", "language": "en", "element": "contributor", "qualifier": "department", "schema": "dc"}, {"key": "dc.contributor.organization", "value": "Jyv\u00e4skyl\u00e4n yliopisto", "language": "fi", "element": "contributor", "qualifier": "organization", "schema": "dc"}, {"key": "dc.contributor.organization", "value": "University of Jyv\u00e4skyl\u00e4", "language": "en", "element": "contributor", "qualifier": "organization", "schema": "dc"}, {"key": "dc.subject.discipline", "value": "Tietotekniikka", "language": "fi", "element": "subject", "qualifier": "discipline", "schema": "dc"}, {"key": "dc.subject.discipline", "value": "Mathematical Information Technology", "language": "en", "element": "subject", "qualifier": "discipline", "schema": "dc"}, {"key": "yvv.contractresearch.funding", "value": "0", "language": "", "element": "contractresearch", "qualifier": "funding", "schema": "yvv"}, {"key": "dc.type.coar", "value": "http://purl.org/coar/resource_type/c_7a1f", "language": null, "element": "type", "qualifier": "coar", "schema": "dc"}, {"key": "dc.rights.accesslevel", "value": "openAccess", "language": null, "element": "rights", "qualifier": "accesslevel", "schema": "dc"}, {"key": "dc.type.publication", "value": "bachelorThesis", "language": null, "element": "type", "qualifier": "publication", "schema": "dc"}, {"key": "dc.subject.oppiainekoodi", "value": "602", "language": "", "element": "subject", "qualifier": "oppiainekoodi", "schema": "dc"}, {"key": "dc.subject.yso", "value": "haavoittuvuus", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.subject.yso", "value": "JavaScript", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.subject.yso", "value": "paketit", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.rights.url", "value": "https://rightsstatements.org/page/InC/1.0/", "language": null, "element": "rights", "qualifier": "url", "schema": "dc"}]
id jyx.123456789_87900
language fin
last_indexed 2025-02-18T10:56:52Z
main_date 2023-01-01T00:00:00Z
main_date_str 2023
online_boolean 1
online_urls_str_mv {"url":"https:\/\/jyx.jyu.fi\/bitstreams\/19725166-aaf2-46bc-8ad0-809278bfe4b6\/download","text":"URN:NBN:fi:jyu-202306193955.pdf","source":"jyx","mediaType":"application\/pdf"}
publishDate 2023
record_format qdc
source_str_mv jyx
spellingShingle Erho, Joonas npm-paketinhallintajärjestelmän käytännön ongelmat ja riskit paketinhallintajärjestelmä npm Node.js riippuvuussuhteet semanttinen versiointi Tietotekniikka Mathematical Information Technology 602 haavoittuvuus JavaScript paketit
title npm-paketinhallintajärjestelmän käytännön ongelmat ja riskit
title_full npm-paketinhallintajärjestelmän käytännön ongelmat ja riskit
title_fullStr npm-paketinhallintajärjestelmän käytännön ongelmat ja riskit npm-paketinhallintajärjestelmän käytännön ongelmat ja riskit
title_full_unstemmed npm-paketinhallintajärjestelmän käytännön ongelmat ja riskit npm-paketinhallintajärjestelmän käytännön ongelmat ja riskit
title_short npm-paketinhallintajärjestelmän käytännön ongelmat ja riskit
title_sort npm paketinhallintajärjestelmän käytännön ongelmat ja riskit
title_txtP npm-paketinhallintajärjestelmän käytännön ongelmat ja riskit
topic paketinhallintajärjestelmä npm Node.js riippuvuussuhteet semanttinen versiointi Tietotekniikka Mathematical Information Technology 602 haavoittuvuus JavaScript paketit
topic_facet 602 JavaScript Mathematical Information Technology Node.js Tietotekniikka haavoittuvuus npm paketinhallintajärjestelmä paketit riippuvuussuhteet semanttinen versiointi
url https://jyx.jyu.fi/handle/123456789/87900 http://www.urn.fi/URN:NBN:fi:jyu-202306193955
work_keys_str_mv AT erhojoonas npmpaketinhallintajärjestelmänkäytännönongelmatjariskit