
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@karinjs/art-template
Advanced tools
art-template 是一个简约、超快的模板引擎。它采用作用域预声明的技术来优化模板渲染速度,从而获得接近 JavaScript 极限的运行性能,并且同时支持 NodeJS 和浏览器。
本项目是对原 art-template 的重新打包优化版本,使用 vite 进行构建,大幅减小了包体积和依赖数量。
npm上的所有操作均由github actions自动完成# npm
npm install @karinjs/art-template
# yarn
yarn add @karinjs/art-template
# pnpm
pnpm add @karinjs/art-template
如果你正在从原版 art-template 升级,可以使用包别名方式安装,这样无需修改任何代码:
# npm 别名安装
npm install art-template@npm:@karinjs/art-template
# yarn 别名安装
yarn add art-template@npm:@karinjs/art-template
# pnpm 别名安装
pnpm add art-template@npm:@karinjs/art-template
或者在 package.json 中配置别名:
{
"dependencies": {
"art-template": "npm:@karinjs/art-template"
}
}
然后执行安装命令:
npm install
# 或
yarn
# 或
pnpm install
| 指标 | 原版 art-template | @karinjs/art-template |
|---|---|---|
| 包体积 | 8.3MB | 382KB |
| 依赖数量 | 33个 | 0个 |
| 模块格式 | CommonJS/UMD | 仅 ESM |
数据来源:pkg-size.dev/art-template
ci每次碰到ci都会发生不幸...tsup修改为使用viteart-template打包成单个cjs文件,随后对cjs文件进行二次打包成esmFAQs
JavaScript Template Engine
The npm package @karinjs/art-template receives a total of 120 weekly downloads. As such, @karinjs/art-template popularity was classified as not popular.
We found that @karinjs/art-template demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.