
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@lcsoft/vue-components
Advanced tools
可复用的、成熟的、基础组件
VueUeditorWrap组件做示例)安装组件库npm i @lcsoft/vue-components
引入需要的组件
import { VueUeditorWrap } from '@lcsoft/vue-components'
注册组件
components: {
VueUeditorWrap
},
参照每个组件的说明文档合理使用
在lib目录下建一个以组件名称命名的(kebab-case)目录
添加组件,统一命名index.vue(建议添加说明文档README.md,介绍你的组件的使用方式,以及一些容易踩的坑,方便组内其他小伙伴使用)
在当前组件目录下按需添加相关的js、css、image等资源
在lib目录下的index.js导出你的组件(Camel-Case命名),并做简单的说明和署名
import VueUeditorWrap from './vue-ueditor-wrap' // 百度富文本编辑器-郑
export {
VueUeditorWrap
}
在package.json中修改版本号。
"version": "x.y.z"
运行npm publish --access=public 发布
发布之前请先将自己的库更新到最新版本
如果npm发布新版本,各位小伙伴的注册邮箱应该会收到通知,请及时在自己的项目中执行npm update 或 npm i @lcsoft/vue-components更新组件库,保持团队基础组件同步
如果你不放心自己添加的组件是否正确可用,你完全可以先进入自己项目的node_modules目录下,找到@lcsoft目录,在那里面修改或者添加你的组件,如果你在运行自己的项目时
完全OK,那么放心的npm publish吧。

FAQs
龙创前端团队Vue基础组件库
We found that @lcsoft/vue-components demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.