
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@njtsys/plugin
Advanced tools
A Vue.js project
├── src/ // 源码目录
│ ├── ejtColmenu.vue // 列控制组件代码
│ ├── ejtPagination.vue // 分页组件代码
│ ├── index.js // 挂载插件
├── index.html // 入口html文件
├── package.json // 项目配置
├── package-lock.json //
├── README.md // 项目描述
├── webpack.config.js // 打包配置
开发组件并在src/index.js中挂在
module.exports = {
entry: './src/index.js',
output: {
path: path.resolve(__dirname, './dist'),
publicPath: '/dist/',
filename: 'ejtPlugin.js', //打包后名称
library: 'ejtPlugin', // 指定的就是你使用require时的模块名
libraryTarget: 'umd', // 指定输出格式
umdNamedDefine: true // 会对 UMD 的构建过程中的 AMD 模块进行命名。否则就使用匿名的 define
}...
// 发布开源需要将这个字段改为 false
"private": false,
// import 时检索的路径
"main": "dist/ejtPlugin.js",
npm run build // 打包项目
npm login // 登陆
npm publish // 发布
npm install ejt-plugin // npm 安装
yarn add ejt-plugin // yarn安装
import Vue from 'vue'
import ejtPlugin from 'ejt-plugin'
Vue.use(ejtPlugin)
<njt-colmenu></njt-colmenu>
<njt-pagination></njt-pagination>
FAQs
A Vue.js project
We found that @njtsys/plugin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.