
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@anov/core
Advanced tools
The core service of the ANOV-DEV framework, providing lifecycle management, configuration, data management, and page management services.
| 类型 | 描述 |
|---|---|
| feature | 新功能开发,例如添加新模块、新接口等。 |
| fix | 修复 bug,代码错误修正或问题修复。 |
| style | 代码风格调整,例如代码格式化、修复空格、分号等(不影响功能的改动)。 |
| docs | 文档相关的修改,例如更新 README、API 文档、注释等。 |
| perf | 提升性能的改动,例如优化算法、改进查询速度等。 |
| test | 添加或修改测试代码(单元测试、集成测试等)。 |
| build | 构建系统或外部依赖的改动,例如修改 webpack、rollup 配置等。 |
| revert | 恢复到某次提交(即回滚代码)。 |
| deps | 修改依赖相关,例如升级、降级或移除依赖包。 |
| wip | Work In Progress:正在开发中,尚未完成的工作提交。 |
| refactor | 代码重构,例如优化代码逻辑、删除冗余代码等(不改变功能行为)。 |
| release | 发布版本,例如打 tag 或生成 changelog。 |
| chore | 杂项更新,例如构建脚本改动、工具链配置、CI 配置等。 |
| ci | 持续集成的相关配置或脚本修改,例如更新 GitHub Actions、Jenkins 配置。 |
| hotfix | 紧急修复的提交(通常用于生产环境问题的快速修复)。 |
feat: 添加用户注册功能fix: 修复用户注册页面的表单验证错误docs: 更新用户注册功能的文档style: 修复代码中多余的空格和换行refactor: 重构用户注册功能的逻辑代码chore: 配置 ESLint 和 Prettier 格式化规则@anov/core 使用 Vite 作为构建工具。Vite 提供了更快的构建速度和更好的开发体验。
pnpm build: 生产环境构建,输出优化后的代码pnpm dev: 开发模式构建,启用源码映射和文件监视功能Vite 构建配置位于 vite.config.ts 文件中,主要特点:
.mjs)dist/types/)lodash-es, axios)FAQs
The core service of the ANOV-DEV framework, providing lifecycle management, configuration, data management, and page management services.
The npm package @anov/core receives a total of 46 weekly downloads. As such, @anov/core popularity was classified as not popular.
We found that @anov/core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 16 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.