Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@dcasia/mini-program-tailwind-webpack-plugin
Advanced tools
![wechat-mp-plugin](https://user-images.githubusercontent.com/3030587/158826917-30c79222-b79d-4857-88f9-7e4184d1e771.jpg)
Build WeChat mini programs using Tailwind & Windi CSS frameworks with this webpack plugin.
一个可以让你用 Tailwind 或 Windi CSS 开发微信小程序的 Webpack 插件。
Made by Digital Creative - Digital product agency, Shanghai.
来自 Digital Creative, 一家位于上海的数字产品调研、设计与开发公司。
由于小程序本身不支持由 Tailwind/Windi CSS 产生的选择器名称中包含的一些特殊字符(\[
\!
\.
等),这使得你无法在开发小程序时使用一些本该在开发 Web 应用时就可以使用的很实用且灵活的语法,如 w-[30px]
, translate-x-1/2
, !bg-[#ff0000]
。
为了突破这一限制,我们开发了这一款插件来帮助你在开发小程序时依然保持着与使用 Tailwind/Windi 开发 Web 应用时高度一致的开发体验,你不再需要关注哪些字符串不被支持而不得不换一种写法,而是继续按照 Tailwind/Windi 的官方语法继续编写你的小程序样式,其他工作则由这款插件静默处理。
此外,该插件还集成了 rpx 值自动转换的功能。该功能可以将 Tailwind/Windi 配置文件中以及源码中我们书写的 rem 与 px 单位的值在生成结果中自动转换为 rpx 单位的值。这既可以让开发者重复使用在 Web 项目中同一份团队制定的主题配置文件又可以让小程序享受到 responsive pixel 特性带来的便利。
相关文章:让你的小程序用上原汁原味的 Tailwind/Windi CSS
*以下示范操作步骤以集成 Windi CSS 为例
MPX, 一款具有优秀开发体验和深度性能优化的增强型跨端小程序框架。
依照 Windi CSS 官方文档 中陈述的步骤进行
//windi.config.js
export default {
//...
prefixer: false,
extract: {
// 将 .mpx 文件纳入范围
include: ['src/**/*.{css,html,mpx}'],
// 忽略部分文件夹
exclude: ['node_modules', '.git', 'dist']
},
corePlugins: {
// 禁用掉在小程序环境中不可能用到的 plugins
container: false
}
//...
}
npm i @dcasia/mini-program-tailwind-webpack-plugin --save-dev
//webpack.base.conf.js
const WindiCSSWebpackPlugin = require("windicss-webpack-plugin");
const MiniProgramTailwindWebpackPlugin = require("@dcasia/mini-program-tailwind-webpack-plugin")
module.exports = {
//...
plugins: [
new WindiCSSWebpackPlugin(),
new MiniProgramTailwindWebpackPlugin({
enableRpx: true,
designWidth: 350
})
]
}
<style src="windi-utilities.css"></style>
开始享受在小程序项目中由 Windi CSS 带来的高效开发体验 🎉
基于原生小程序的开发模式来集成这款插件,过程通常因每个团队的工作流不同而异。有的团队会有内部定制的一套 Webpack 或 Gulp 工作流,而有的团队甚至不会借助任何文件打包或处理的工作流去编写小程序。
但这里需要明确的一点是,若要想在以原生开发模式的基础之上去增加文件处理的功能,我们必须去额外的启动一套文件监听处理服务,这个服务通常由自定义配置好的 Webpack, Gulp 等第三方工具完成。
为了使这款插件具备超出 Webpack 适配范围之外尽可能大的兼容性,我们将核心功能分离并打包进了 dist/universal-handler.js
文件中,若你想在自己的工作流中使用该插件的核心功能,可以先在工作流逻辑中引入 universal-handler
:
const { handleSource } = require('@dcasia/mini-program-tailwind-webpack-plugin/dist/universal-handler')
随后处理 template:
const template = '<view class="w-10 h-[0.5px] text-[#ffffff]"></view>'
const handledTemplate = handleSource('template', template, options)
处理 style:
const style = '.h-\\[0\\.5px\\] {height: 0.5px;}'
const handledStyle = handleSource('style', style, options)
此后你便可以将处理过的字符串返回至工作流原本的流程中来生成最终的文件。
对于集成过程中涉及到其他方面的细节可参考小程序集成 Windi CSS 的自定义实现
Name | Type | Default | Description |
---|---|---|---|
enableRpx | Boolean | true | 是否开启自动转换至 rpx 单位值的功能 |
designWidth | Number | 350 | 设计稿的像素宽度值,该尺寸会影响 rpx 转换过程中的计算比率 |
styleIsolation
,否则即使 Tailwind/Windi CSS 工作正常也无法用来开发组件 UI。(Issue#1)
{
"component": true,
"styleIsolation": "apply-shared"
}
@import
导入的 wxss 文件内容的变动,所以当启用热重载功能开发时,模拟器不会随着你对 Tailwind/Windi CSS 的更改而更新 UI。目前微信官方已知晓该 bug 的存在,在该 bug 修复之前,我们建议你在开发时关闭热重载,用传统的页面自动刷新来预览每一次的 UI 更新。(Issue#3)Can't tailwind/windi be compatible with WeChat mini programs? What are the restrictions there?
Naturally it can only be compatible in certain degree, for instance it can still analyze all class names you used in template and style files and pick up what has been used and pack them into a singe style file, which is nice as always. However, the restrictions are that you can't use much flexible and advanced feature, such as value auto-infer mt-[5px]
, fractions value translate-x-1/2
, h-1.5
and color value bg-[#ffffff]
etc, so your productivity would be drastically decreased.
Why are WeChat mini programs so special when it comes to tailwind/windi?
Well in terms of the business, there is no doubt that WeChat mini programs creates incredible influence in the China market but technically speaking the way it provides for developers to build is conservative and restrictive and out of sync with international technical community. For instance the CSS selector in mini program couldn't support *
:hover
etc and also any escaped selector names \[
\]
\!
\.
etc which are the critical elements that tailwind/windi uses to generate class names.
How does this plugin make tailwind/windi compatible with mini program?
Behind the scene it silently replace all unsupported selector names in mini program when you are developing or building your project by leveraging the ability of Webpack, Postcss, WXML parser and Babel etc.
Features | Naturally | With the plugin |
---|---|---|
Regular: h-10, text-white | ✅ | ✅ |
Responsive: md:p-2 | ❌ | ✅ |
Important: !p-1 | ❌ | ✅ |
Variants: dark:bg-gray-800 | ❌ | ✅ |
Variants groups: hover:(bg-gray-400 font-medium) | ❌ | ✅ |
Fraction: translate-x-1/2, w-8.5 | ❌ | ✅ |
Value infer: t-[25px], bg-[#ffffff] | ❌ | ✅ |
RGB value infer: text-[rgb(25,25,25)] | ❌ | ✅ |
Responsive pixel auto conversion from rem and px unit | ❌ | ✅ |
FAQs
让你的小程序用上原汁原味的 Tailwind/Windi CSS
The npm package @dcasia/mini-program-tailwind-webpack-plugin receives a total of 309 weekly downloads. As such, @dcasia/mini-program-tailwind-webpack-plugin popularity was classified as not popular.
We found that @dcasia/mini-program-tailwind-webpack-plugin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.