Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@fmfe/fm-utils
Advanced tools
Followme 前端团队通用 JavaScript 工具库
$ yarn add @fmfe/fm-utils
文档地址:https://fmfe.github.io/fm-utils/
命令 | 描述信息 |
---|---|
npm run lint | eslint 检查 |
npm run lint:fix | eslint 修复 |
npm run doc | 更新本地文档 |
npm run doc:server | 启动本地文档服务器 |
npm | 运行单元测试 |
npm run test:coverage | 查看测试覆盖率报告 |
npm run changelog | 更新 CHANGELOG 文件 |
npm run release | 发布 npm 模块 |
递增版本号:
npm version patch 发布补丁
npm version minor 发布小版本
npm version major 发布主版本
发布组织模块:
$ npm publish --access public
代码规范
提交规范
npm install -g commitizen
git cz
替代 git commit
This repo is released under the MIT License.
FAQs
Followme 公共工具库
We found that @fmfe/fm-utils demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.