
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@tmsfe/tms-cli
Advanced tools
[TOC]
TMSWEB团队核心工程效能工具。提供多种类型前端项目的创建、构建、部署等功能。
卸载完成后。 安装
sudo npm i @tmsfe/tms-cli@0.0.17-alpha.2 -g
安装成功后, 全局可以运行tms命令
使用tms-cli快速初始化小程序开发环境
克隆tms-frontend代码
git clone https://git.woa.com/tmsfe/tms-frontend.git
初始化开发环境
# -m 参数如果不传, 默认构建全部模块 -p是小程序名
# 因为配置文件代码还没有合入master, 需要加一个-b参数指定分支
tms run init -p <小程序名> -m <模块名> -b feat-dongxuwang-newmpconfig
# 例如
tms run init -p sinan -m aggrerent -b feat-dongxuwang-newmpconfig
启动监听服务
tms run dev
更新小程序
如果小程序的模块配置文件修改, 或者想新增一些开发的模块。 修改tms-frontend根目录下面的mp.config.json后运行
tms run update
tms -h
tms create <projectName>
该命令会在当前目录下面创建一个名为projectName的项目。
作为模块开发的开发环境。
示例:
# 这个会创建一个名字叫project1的项目模版
tms create project1
命令
tms build -t <需要构建的小程序的名称> -b <模版分支名> -p <是否构建模块> -d <构建目录> -r <是否构建远程>
参数说明:
build命令使用的几种场景:
构建本地应用。
tms build
这个命令会检索你src下面所有的有配置文件module.config.json的模块。 将他们构建到小程序中。
根据本地的mp.config.json, 将远程模块仓库同步到本地,
tms build -r
该命令会读取你本地开发目录下面的mp.config.json。将下面配置的小程序模块更新到本地的src目录中
打包官方小程序
tms build -t <mpname>
该命令会打包接入腾讯出行服务的官方小程序
例如
tms build -t sinan
上传当前目录下面的小程序
tms upload
清除本地改动以及还原主分支的配置
tms clean
tms preview
tms update
tms tsc
tms diffcovcheck
tms init-project
tms upgrade
tms info
FAQs
tms-cli
We found that @tmsfe/tms-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.