Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@nutui/carefree
Advanced tools
本webpack插件功能:
npm install @nutui/carefree --save-dev
webpack
配置文件中引入const Carefree = require('@nutui/carefree');
plugins: [
new Carefree({
//配置项
})
]
package.json
的scripts
字段中添加carefree-dev
和carefree-build
命令// package.json
scripts: {
...
"carefree-dev": "cross-env NODE_ENV=carefree carefree_env=dev webpack -w --colors --progress",
"carefree-build": "cross-env carefree_env=build npm run upload",
...
}
carefree
,可在脚本里修改carefree_env
为cross-env carefree_env=stop
ssh
与ftp
两种上传方式upload
设置为false
将只打印二维码,不上传静态资源devtool
以减小上传文件的体积,需要时可以设置为webpack
的devtool
相应值参数 | 说明 | 默认值 | 是否必填 |
---|---|---|---|
upload | 是否上传 | true | 否 |
devtool | 参考webpack的devtool配置 | false | 否 |
publicPath | 同webpackConfig.output.publicPath | - | 是 |
qrcodeUrl | 扫二维码后跳转的地址 | publicPath + 'index.html' | 否 |
ftp.host | 服务器ip | -- | 是 |
ftp.port | 服务器 | -- | 是 |
ftp.source | 待上传的目录 | -- | 是 |
ftp.target | 服务器端的项目目录 | -- | 是 |
ftp.username | 服务器用户名 | -- | 是 |
ftp.password | 服务器密码 | -- | 是 |
ssh[option] | 同ftp相关配置项 | -- | 是 |
FAQs
A H5 debugging tool independent of wifi hotspots
The npm package @nutui/carefree receives a total of 7 weekly downloads. As such, @nutui/carefree popularity was classified as not popular.
We found that @nutui/carefree demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.