Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
@ubrorg/card
Advanced tools
在页面的 page.json
中配置:
{
"usingComponents": {
"card": "@ubrorg/card/lib/index"
}
}
在页面的 page.axml
中使用:
<view class="card-wrapper" a:for="{{items}}">
<card
title="abc"
index="{{index}}"
onLikeTap="handleLikeTap"
dataItem="{{item}}"
>
</card>
</view>
在页面中声明 handleLikeTap
方法处理喜欢状态:
Page({
handleLikeTap(e) {
const { index } = e.target.dataset
const { items } = this.data
this.setData({
[`items[${index}].like`]: !items[index].like
})
}
});
可直接传dataItem="{{item}}" 也可使用具体属性去覆盖data里的属性值
属性 | 类型 | 默认值 | 解释 |
---|---|---|---|
type | string | large | 卡片类型 |
backgroupImgUrl | string | null | 头图 |
projectName | string | '' | 卡片名称 |
description | string | '' | 描述 |
extra | string | '' | 附加描述 |
projectTag | string | '' | 图标 |
favorite_status | boolean | false | 是否喜欢 |
showLike | boolean | true | 是否展示喜欢图标 |
index | string | null | 列表索引 |
cardTagName | string | null | 标签 |
projectTypeName | string | '' | 分类类型 |
type
可选值
icon
及 tagType
可选值
miapp newbranch
: 新建分支miapp push
: 提交代码miapp prepub
: 预发(发布 beta 版本)miapp publish
: 正式发布FAQs
card
The npm package @ubrorg/card receives a total of 5 weekly downloads. As such, @ubrorg/card popularity was classified as not popular.
We found that @ubrorg/card demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 11 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.