
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@wecity/tdgv-cli
Advanced tools
我们提供了 tdgv 命令行工具,旨在帮助用户快速搭建启动一个项目。其具备以下能力:
1. 快速创建项目:初始化项目脚手架,具备完整工程能力,无需配置即可运行
2. 集成 Docker 容器化环境:免去繁琐的环境配置,开箱即用,统一开发运行环境,避免系统环境差异带来的各类开发问题
3. 自动路由注册:无需开发者注册繁琐的路由规则,脚手架会自动根据项目结构生成标准化的路由配置,同时支持用户自定义配置路由信息等个性化需求
4. 模版一键导入:基于 tdesign-gov-vue 组件库,结合高频业务开发场景,我们提供了多种场景模版,支持用户在线预览选择模版,一键导入到项目,提高业务开发效率
安装全局依赖:
yarn global add @wecity/tdgv-cli
# OR
npm install -g @wecity/tdgv-cli
也可以使用 npx (npm v5.2+):
npx @wecity/tdgv-cli
运行以下命令查看是否安装成功:
tdgv -V, --version 检查版本
tdgv -h, --help 查看帮助信息
运行以下命令升级 tdgv 到最新版本:
yarn global upgrade --latest @wecity/tdgv-cli
# OR
npm update -g @wecity/tdgv-cli
仅需运行以下命令:
tdgv
在任意路径下,运行以下命令:
tdgv add <template-name>
FAQs
TDesign Web Vue政务业务框架脚手架命令行工具
We found that @wecity/tdgv-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 19 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.