Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@fmfe/fm-utils
Advanced tools
Followme 前端团队通用 JavaScript 工具库
$ yarn add @fmfe/fm-utils
文档地址:https://fmfe.github.io/fm-utils/
命令 | 描述信息 |
---|---|
npm run lint | eslint 检查 |
npm run lint:fix | eslint 修复 |
npm run doc | 更新本地文档 |
npm run doc:server | 启动本地文档服务器 |
npm | 运行单元测试 |
npm run test:coverage | 查看测试覆盖率报告 |
npm run changelog | 更新 CHANGELOG 文件 |
npm run release | 发布 npm 模块 |
递增版本号:
npm version patch 发布补丁
npm version minor 发布小版本
npm version major 发布主版本
发布组织模块:
$ npm publish --access public
代码规范
提交规范
npm install -g commitizen
git cz
替代 git commit
This repo is released under the MIT License.
FAQs
Followme 公共工具库
The npm package @fmfe/fm-utils receives a total of 2 weekly downloads. As such, @fmfe/fm-utils popularity was classified as not popular.
We found that @fmfe/fm-utils demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.