
Security News
/Research
Popular node-ipc npm Package Infected with Credential Stealer
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
@seemusic/element-plus-theme-sop
Advanced tools
看见音乐后台项目自定义 Element Plus 皮肤。
本项目只包含当前公司设计规范中涉及到的组件(及组件子功能)的样式, 不会去做全功能兼容
Element Plus 经常 会在版本更迭时 破坏性 的改变样式实现方式,这给自定义皮肤的使用带来了不少困扰,比如升级了 Element Plus,但是由于皮肤和组件库版本不匹配导致样式出问题。
基于这些情况,本项目发布时的版本号更迭,遵循以下规则:
2.2.42.2.4 的下一个版本为 2.2.72.2.4-rc.1 格式的版本去做修正(主版本和使用的 Element Plus 版本保持一致更重要)这样,使用者可以通过版本号,清晰的知道本项目的适配范围。
npm run storybook
FAQs
星球发行 SOP 系统自定义 Element Plus 皮肤
The npm package @seemusic/element-plus-theme-sop receives a total of 69 weekly downloads. As such, @seemusic/element-plus-theme-sop popularity was classified as not popular.
We found that @seemusic/element-plus-theme-sop demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.