Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
@citiccardfe/stella
Advanced tools
🔥 文档网站
# 通过 npm 安装
npm i @citiccardfe/stella -S
import Vue from 'vue';
import { Button } from '@citiccardfe/stella';
import 'stella/lib/index.css';
Vue.use(Button);
stella 也支持按需引入、CDN 引入等方式,详细说明见 快速上手.
组件库的升级需要进行如下操作
1.代码修改好后,修改package.json中的项目版本
{
"name": "@citiccardfe/stella",
// 版本号按实际情况提升
"version": "1.0.8",
"description": "CiticCard WebApp UI Components built on Vue",
...
2.执行打包命令
# build:site - 生成网页文档, build:lib - 生成组件库
npm run build:site && npm run build:lib
3.执行发布命令
# 注意,项目单独配置了.npmrc文件,发布时,请确认registry参数是否对应了内网库
npm publish
4.代码提交
# commit内容按规范填写
git add . && git commit -m "feat: new component xxx." && git push
5.jenkins启动构建,组件库升级完成
现代浏览器以及 Android 4.0+, iOS 6+.
可以手机扫码以下二维码访问手机端 demo:
FAQs
CiticCard WebApp UI Components built on Vue
We found that @citiccardfe/stella demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.