
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@tarojs/runtime
Advanced tools
@tarojs/runtime
Taro 运行时。在小程序端连接框架(DSL)渲染机制到小程序渲染机制,连接小程序路由和生命周期到框架对应的生命周期。在 H5/RN 端连接小程序生命周期规范到框架生命周期。
暴露给 @tarojs/taro-loader/app
调用,在小程序入口文件中调用,创建一个小程序 App
构造函数接受的小程序应用规范对象。
暴露给 @tarojs/taro-loader/app
调用,在小程序入口文件中调用,创建一个小程序 App
构造函数接受的小程序应用规范对象。
暴露给 @tarojs/taro-loader/page
调用,在小程序页面文件中调用,创建一个小程序 Page
构造函数接受的小程序页面规范对象。
在小程序端模仿浏览器的 window
实现的对象,在浏览器环境中返回浏览器本身的 window
。此对象通过 Webpack 的 ProvidePlugin 注入到全局对象以供第三方库调用。
在小程序端模仿浏览器的 navigator
实现的对象,在浏览器环境中返回浏览器本身的 navigator
。此对象通过 Webpack 的 ProvidePlugin 注入到全局对象以供第三方库调用。
在小程序端模仿浏览器的 document
实现的对象,在浏览器环境中返回浏览器本身的 document
。此对象通过 Webpack 的 ProvidePlugin 注入到全局对象以供第三方库调用。
暴露给开发者的 Taro 全局变量,目前有三个属性:
Current.app
,返回当前小程序应用实例,非小程序端返回小程序规范应用实例,可通过此实例调用小程序规范生命周期。Current.page
,返回当前小程序页面实例,非小程序端返回小程序规范页面实例,可通过此实例调用小程序规范生命周期。Current.router
,返回当前小程序路由信息,非小程序端返回小程序规范路由信息Taro 配置:
html
: 渲染 HTMLdebug
: 开启之后会打印渲染时间prerender
: 暴露给 @tarojs/cli
的内部参数FAQs
taro runtime for mini apps.
The npm package @tarojs/runtime receives a total of 5,753 weekly downloads. As such, @tarojs/runtime popularity was classified as popular.
We found that @tarojs/runtime demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.