
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@lumal/cockpit
Advanced tools
Lumal generic cockpit orchestration framework: layout runtime, component registry, designer and message bus.
Lumal 通用驾驶舱 v3 编排框架。包负责布局配置、左右模块运行时、Designer、组件注册和消息总线;消费应用负责中心内容、业务模块、导航、主题皮肤、权限和持久化。
CockpitConfig 只包含 layouts 和 activeLayoutId,不包含分类、页面或中央组件配置。100%。@lumal/cockpit
@lumal/cockpit/runtime
@lumal/cockpit/designer
@lumal/cockpit/registry
@lumal/cockpit/style.css
runtime 和 designer 独立构建,只读应用无需加载 Designer 与 SortableJS。
import { createCockpitRegistry } from '@lumal/cockpit/registry'
const registry = createCockpitRegistry()
registry.registerWidget({
type: 'application-widget',
label: '应用模块',
component: () => import('./ApplicationWidget.vue'),
})
模块定义可以提供 thumbnail。未提供时 Designer 实时渲染组件;缩略图和业务资源始终由消费应用维护。
<LumalCockpit
v-model:active-layout-id="activeLayoutId"
:config="config"
:registry="registry"
:viewport-mode="viewportMode"
>
<template #header-title="{ title }">
<AppHeader :title="title" :layouts="config.layouts" />
</template>
<template #center="{ context, layout }">
<ApplicationCenter :key="context.instanceId" :context="context" :layout="layout" />
</template>
</LumalCockpit>
viewportMode="scale" 使用 1920 × 1080 等比缩放;viewportMode="vwvh" 使用 VW/VH 单位适配。instanceId 的实例。<LumalCockpitDesigner
:config="config"
:registry="registry"
:saving="saving"
@save="saveLayout"
@cancel="closeDesigner"
/>
mode: 'design' 的消息总线;模块库预览保持隔离。{ config, layout },包不调用 HTTP 或写入 localStorage。LumalCockpit 默认使用 LumalCockpitCard。应用可通过 cardComponent 替换外框和 Tab 头部,组件须接收:
title?: stringwidget?: CockpitWidgetInstancetabs?: CockpitCardTab[]activeTabId?: stringupdate:activeTabId 事件title 和 tab 插槽默认 Card 提供 TabList、Tab、TabPanel 语义以及方向键、Home、End 键盘操作。
包只提供结构样式和语义 CSS 变量,不包含固定行业皮肤、Logo、地图、业务截图或业务字体。消费应用可以覆盖变量、传入 Card、使用标题背景和自定义插槽实现品牌样式。
FAQs
Lumal generic cockpit orchestration framework: layout runtime, component registry, designer and message bus.
We found that @lumal/cockpit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.