
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@mouldjs/mould
Advanced tools
简体中文 | English
Mould 是一个试验性项目,它通过在 GUI 和 Code 间建立接口,帮设计师和工程师在各自的侧达成自治。 预想中,Mould 可以解决以下在现有条件下较难解决的问题:
使用 Mould 的 GUI 工程中,预设了三个不可或缺的角色(但不一定需要三个人):
具体工作流程是,首先架构根据业务需求,梳理出需要哪些界面,将界面分解为小颗粒的组件(Mould),定义组件的功能和接口:
架构定义完毕之后,视觉和程序可以同步进行各自的工作。
视觉需要对架构给出的每一个组件进行设计。需要理解架构对业务的定义,正确地结合 kits 进行设计。
对 kits 可以这样理解:我们小时候玩过的注塑拼装玩具(高达模型),厂商规定好玩具的设计蓝图,组成模型的每一个构件都会给出来,我们只需要根据说明书组装这些构件即可。这里的 Mould 即为蓝图,kits 则是要完成拼装所需的构件。
程序需要完成每一个组件定义的函数。带类型的函数签名可以根据架构给到的接口信息自动生成,辅助程序开发。函数的模型为:input -> [state, scope]
视觉和程序是完全自治的。即,程序不需要等待视觉的设计,可同步进行工作。而设计也不依赖程序对界面的实现,且可随时对不满意的部分进行修改。
一句话总结 Mould 工程的角色分工:架构定义骨架 -> 视觉填充血肉 -> 程序注入魔法。
FAQs
English | [简体中文](./README.md)
The npm package @mouldjs/mould receives a total of 3 weekly downloads. As such, @mouldjs/mould popularity was classified as not popular.
We found that @mouldjs/mould demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.