
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
@wtto00/vite-plugin-vconsole
Advanced tools
vite plugin for vconsole
一个适用于 Vite2+的插件,帮助开发者在各个环境下方便使用 VConsole 的功能。可以方便配置区分环境,根据环境动态加载 VConsole,支持多页面配置。
vconsole,无需额外安装resize-observer-polyfill,兼容 iOS12 等旧浏览器。
resize-observer-polyfill需要传入参数resizeObserverPolyfill:true开启加载
node version: >=12.0.0
vite version: >=2.0.0
pnpm add @wtto00/vite-plugin-vconsole -D
# or
# npm i @wtto00/vite-plugin-vconsole -D
# yarn add @wtto00/vite-plugin-vconsole -D
import {defineConfig} from 'vite';
import vue from '@vitejs/plugin-vue';
import {viteVConsole} from '@wtto00/vite-plugin-vconsole';
import path from 'node:path';
// https://vitejs.dev/config/
export default defineConfig({
plugins: [
vue(),
viteVConsole({
entry: path.resolve('src/main.ts'), // 或者可以使用这个配置: [path.resolve('src/main.ts')]
localEnabled: true,
enabled: true,
config: {
maxLogNumber: 1000,
theme: 'dark',
},
}),
],
});
import {defineConfig} from 'vite';
import vue from '@vitejs/plugin-vue';
import {viteVConsole} from '@wtto00/vite-plugin-vconsole';
import path from 'node:path';
// https://vitejs.dev/config/
export default defineConfig({
plugins: [
vue(),
viteVConsole({
entry: [path.resolve('src/main.ts')], // 每个页面的入口文件,和上面不一样的地方,这里是一个数组
localEnabled: true,
enabled: true,
config: {
maxLogNumber: 1000,
theme: 'dark',
},
}),
],
});
import {defineConfig} from 'vite';
import reactRefresh from '@vitejs/plugin-react-refresh';
import {viteVConsole} from '@wtto00/vite-plugin-vconsole';
import path from 'node:path';
// https://vitejs.dev/config/
export default defineConfig({
plugins: [
reactRefresh(),
viteVConsole({
entry: path.resolve('src/main.tsx'),
localEnabled: true,
enabled: true,
config: {
maxLogNumber: 1000,
theme: 'dark',
},
}),
],
});
// 你可以使用 command / mode 来区分是否使用
import { UserConfigExport, ConfigEnv } from 'vite';
import { viteVConsole } from '@wtto00/vite-plugin-vconsole';
import vue from '@vitejs/plugin-vue';
import path from 'node:path';
export default ({ command, mode }: ConfigEnv): UserConfigExport => {
return {
plugins: [
vue(),
viteVConsole({
entry: [path.resolve('src/main.ts')], // 入口文件
localEnabled: command === 'serve', // serve开发环境下
enabled: command !== 'serve' || mode === 'test', // 打包环境下/发布测试包
config: { // vconsole 配置项
maxLogNumber: 1000,
theme: 'light'
}
})
],
};
};
| 配置项 | 类型 | 是否必须 | 默认值 | 说明 |
|---|---|---|---|---|
| entry | string | string[] | 是 | - | 必须提供,支持多入口 |
| localEnabled | boolean | 否 | false | 开发环境下是否启用 |
| enabled | boolean | 否 | true | 打包环境下是否启用 |
| resizeObserverPolyfill | boolean | 否 | false | 是否加载 resize-observer-polyfill 以适配低版本浏览器 |
| config | VConsoleOptions | 否 | {} | 传递给 vconsole 的属性 |
开发环境: 是指 command==='serve'打包环境: 是指 command==='build'command 详见 vite 情景配置
FAQs
vite plugin vconsole
We found that @wtto00/vite-plugin-vconsole demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.