
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@wecity/form-render-react
Advanced tools
form-render-react提供 form-render 组件,用于移动端动态渲染表单
#构建项目
yarn build #用于构建form-render的包
yarn build-site #用于构建手机版预览living站点
#启动项目,用户测试form-render例子
yarn serve
#启动项目,用户测试构建手机版预览living站点
yarn dev
import React from 'react'
import { setup } from '@wecity/formily-react-weui'
import { FormRender } from '@wecity/form-render-react'
const schema = {
// ...
}
function App() {
setup() // 注册所有组件
return <FormRender schema={schema} />
}
export default App
FAQs
> 提供 form-render 组件,用于移动端动态渲染表单
We found that @wecity/form-render-react demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 15 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.