
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@roadup/core
Advanced tools
新版架构图
+--------------------------------------------------------------------------------------------------------------+
| +-----------------------------------------------------+ +-plugin------------+ |
| | | | | |
| | | | logger | |
| | | | | |
| | 业务层 | +---------+ +-------------------+ |
| | | | | | | |
| | | <--- | App | <---- | socket | |
| | | | | | | |
| +---------------------------------------------------- + +---------+ +-------------------+ |
| | | | | | | ^ | | |
| | Page | Page | Page | Page | Page | | | ... | |
| | | | | | | | | | |
| +-----------------------------------------------------+ | +-------------------+ |
| ^ | ^ |
| | | | |
| | | | |
| +---------------------------------------------------------+----------------------+ |
| | |
| | |
| +-----core------------------------------------------------------------------------------------------+ |
| | | | | | | |
| | message | preset | global | request | router | |
| | | | | | | |
| +-------|---------------------|-------------------|-------------------|------------------|----------+ |
+------------|---------------------|-------------------|-------------------|------------------|----------------+
| | | | +---> 路由切换
| | | |
| | | +----->网络请求
| | |
| | +---->用于处理全局状态, 会自动更新到本地存储, 应用启动时会提前恢复
| |
| +---->公共逻辑处理, 可以同步参与到应用的生命周期、 特定的动作中, 如路由变动, 请求成功等
|
+---->用于通知应用的各种状态变动(异步), 如: 全局数据变动, 网络切换, 应用或页面的各个生命周期等等
API
function $plugin(name: String | PluginFn, plugin?: PluginFn)
function PluginFn(core: Core): Object
interface Core {
$message: {
on(key:String, callback: Function): String,
emit(key: String, data: Any),
off(key: String),
race(key: String, callback: FUnction)
},
$global: {
read(key: String): Any,
write(key: String, data: Any): Any,
del(key: String),
clean()
},
$router: {
goto(path: String, data: Object): Promise,
redirect(path: String, data: Object): Promise,
switchto(tab: String): Promise,
back(delta: Number): Promise
},
$request(url: String, data: Object): Promise,
$take(lifetime: String, callback: Function)
}
可参与的生命周期
app.onLaunch
app.onShow
app.onHide
app.onPageNotFound
app.onError
component.lifetimes.attached
component.lifetimes.detached
component.pageLifetimes.show
component.pageLifetimes.hide
component.pageLifetimes.resize
component.created
component.attached
component.ready
component.moved
component.detached
component.error
FAQs
wechat core
We found that @roadup/core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.