
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@ldesign/desktop
Advanced tools
基于`vue2`的桌面端组件库
@ldesign/desktop 是基于vue@2.6.14开发用于 桌面端 的组件库,切记保证本地的 vue 版本号不要高于 2.6.x,如果使用报错,请检查本地项目的 package.json,确保vue以及vue-template-compiler的版本号为:2.6.x。
{ javascript
"dependencies": {
...,
"vue": "~2.6.14",
},
"devDependencies": {
...,
"vue-template-compiler": "~2.6.14"
}
}
用于桌面端系统及网站,统一的接口风格,一致的UI表现
基于 vue(2.6.14),@vue/composition-api开发,既能使用2.0的语法,也能尝鲜3.0的语法
支持暗黑模式及主题定制,基于less变量和css变量,更换主题方式灵活
支持按需加载,通过es和esm模块引入,能最小限度减小项目大小
npm i @ldesign/desktop
// 最好还要安装@vue/composition-api
npm i @vue/composition-api
推荐使用 Webpack 或 Rollup 等支持 tree-shaking 特性的构建工具,无需额外配置即可实现组件按需引入:
import Vue from 'vue'
import LDesign from '@ldesign/desktop';
import compositionAPI from '@vue/composition-api';
// 这里面主要是主题以及reset样式,组件自身的样式已经跟随组件一同加载,如果需要自定义主题,也可通过改变该文件来实现
import '@ldesign/desktop/es/style/index.css';
Vue.use(LDesign)
Vue.use(compositionAPI)
注意:如果没有安装
@vue/composition-api,项目可能会报错。
FAQs
基于vue2和@vue/composition-api桌面端组件库
We found that @ldesign/desktop demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.