
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@lcsoft/utils
Advanced tools
工具方法或封装的类
formatDate方法做示例)安装组件库npm i @lcsoft/utils
引入需要的方法或类
import { formatDate } from '@lcsoft/utils'
参照每个方法或类的说明文档合理使用
var today = formatDate(Date.now(), yyyy-MM-dd)
在lib目录下建一个以方法名或类名命名的js文件(方法名使用小驼峰,类名使用大驼峰)
在lib目录下的index.js统一导出你的方法或类,并添加简答的说明和作者以明确作用和责任
import formatDate from './formatDate' // 时间格式化-郑
export {
formatDate
}
在package.json中修改版本号。
"version": "x.y.z"
运行npm publish --access=public 发布
发布之前请先将自己的库更新到最新版本
如果npm发布新版本,各位小伙伴的注册邮箱应该会收到通知,请及时在自己的项目中执行npm update 或 npm i @lcsoft/utils更新依赖,保持团队依赖同步
如果你不放心自己添加的方法或类是否正确可用,你完全可以先进入自己项目的node_modules目录下,找到@lcsoft目录,在那里面修改或者添加,如果你在运行自己的项目时
完全OK,那么放心的npm publish吧。

FAQs
We found that @lcsoft/utils demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.