
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@dongercom/ui-v2
Advanced tools
项目js 和vue 代码使用eslint 进行校验,否则提交不会进行自动化构建 #### 本地配置保存后自动进行格式化代码 idea本地配置  配置完成之后编写js文件和vue文件就可以自动格式化代码
项目js 和vue 代码使用eslint 进行校验,否则提交不会进行自动化构建
idea本地配置
配置完成之后编写js文件和vue文件就可以自动格式化代码
yarn run lint:eslint 可以自动格式化,如果无法格式化则会提示手动处理错误

feat:新增功能
fix:bug 修复
docs:文档更新
style:不影响程序逻辑的代码修改(修改空白字符,格式缩进,补全缺失的分号等,没有改变代码逻辑)
refactor:重构代码(既没有新增功能,也没有修复 bug)
perf:性能, 体验优化
test:新增测试用例或是更新现有测试
build:主要目的是修改项目构建系统(例如 glup,webpack,rollup 的配置等)的提交
ci:主要目的是修改项目继续集成流程(例如 Travis,Jenkins,GitLab CI,Circle等)的提交
chore:不属于以上类型的其他类型,比如构建流程, 依赖管理
revert:回滚某个更早之前的提交
package 文件夹下进行开发组件库地址
FAQs
项目js 和vue 代码使用eslint 进行校验,否则提交不会进行自动化构建 #### 本地配置保存后自动进行格式化代码 idea本地配置  配置完成之后编写js文件和vue文件就可以自动格式化代码
We found that @dongercom/ui-v2 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.