
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@mega-apps/cli
Advanced tools
Mom builder for all mega modules apps. The recommended basic operation dependency package is attached, and users can check and repair defects in actual applications.
Mom Web 应用统一构建工具
附带推荐的基础运行依赖包,开发者可以在实际使用中查缺补漏。
Nuxt脚手架创建的项目(附带推荐依赖包)VueCLI脚手架创建的项目(不附带依赖包)Nuxt项目及VueCLI项目VueLoader, 实现 Vue 开启组件名称自动命名与开发环境统一。Vue补丁, 实现嵌套子布局路由正常(Keepalive情况下)。Module.prototype.require, 兼容依赖包查找Yarn或者pnPm来管理依赖ls-lint, eslint, stylelint, ...Jest, Playwright, Vitest 等测试框架TypeScript引擎TailwindCSS,PostCSS, LESS, SASS 等引擎@types 类型库Nuxtjs >= 2.15.8, Nuxt Libs 常用库: https://modules.nuxtjs.org/Webpack, Vite 常用构建工具Mock工具,支持HTTP/HTTPS, WebSocket, Native MockMegaMom平台的各种插件/库/模块. 如:@mega-apps/nuxt-plugin-mom
# 推荐使用 Yarn 来安装依赖
yarn add @mega-apps/cli --dev
# 或使用 pnPm 安装依赖
pnpm add -D @mega-apps/cli
// package.json 文件
{
// 修改 package.json 中的配置
// ...
"scripts": {
"dev": "mom",
"build": "mom generate"
// ...
},
}
// "@mega-apps/cli" 提供了 nuxtConfigExtend 函数 及 momMerge 函数
// momMerge 函数的原型:
// import momMerge from "deepmerge";
// export { momMerge };
import { nuxtConfigExtend, momMerge } from "@mega-apps/cli";
// 引入基础的nuxt.config.配置
import { generateBaseConfig, def } from "@mega-apps/cli/config/nuxt.config";
// 引入基础的nuxt.config.配置
import { generateBaseConfig, def } from "@mega-apps/cli/config/nuxt.config";
// def 函数,是一个兼容的快捷定义函数
const baseCfg = generateBaseConfig({
supportESLint: false,
supportStyleLint: false,
supportTypeScript: false,
supportTailwindCSS: false,
});
// 构造新的 nuxt.config
const config = nuxtConfigExtend([
{},
def(1, {})
], baseCfg);
// 导出配置
export default config;
import {getDefaultSassImplementation } from "@mega-apps/cli/config/nuxt.config";
/**
* 获得默认的Sass解析器
* @param defaultPkg, 默认值:node-sass, 可选值:sass
* @returns module.exports
* @note 关于node-sass的版本要根据nodejs的版本指定,参见:https://www.npmjs.com/package/node-sass 内的版本号对应说明
*
基础配置存放到: "@mega-apps/cli/config/nuxt.config.js"
FAQs
Mom builder for all mega modules apps. The recommended basic operation dependency package is attached, and users can check and repair defects in actual applications.
The npm package @mega-apps/cli receives a total of 4 weekly downloads. As such, @mega-apps/cli popularity was classified as not popular.
We found that @mega-apps/cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.