
Security News
Socket Releases Free Certified Patches for Critical vm2 Sandbox Escape
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.

MyUI是美亚柏科旗下新德汇出品的Web前端一站式项目工程框架。
基于 Vue + ElementUI 。专注于中台系统快速搭建,框架已在多个项目实战检验。
推荐使用 npm 的方式安装,它能更好地和 webpack 打包工具配合使用。
npm i @xdh/my --save
可通过以下两种方式使用 My
官网提供的基于Vue项目的一站式解决方案。
git clone https://gitee.com/newgateway/my-web.git
只需把工程模板项目获取下来就可以使用,包括全部功能,开箱即用。
如只需用到 My 其中的某些组件,可以在已有的项目工程中安装,并完成配置。步骤:
安装组件库
npm i element-ui @xdh/my --save
安装项目依赖插件
npm i babel-plugin-component node-sass sass-loader --save-dev
babel.config.js组件采用了按需加载,需要 在babel.config.js 加上插件,如:
module.exports = {
presets: [
'@vue/cli-plugin-babel/preset'
],
plugins: [
...require('@xdh/my/core/babel.plugins')
]
}
vue.config.js需要在vue.config.js加上别名,如:
module.exports = {
transpileDependencies: ['@xdh/my'],
chainWebpack(chain) {
chain.resolve.alias.set('$ui', '@xdh/my/ui/lib')
}
}
到此,你可以开始引入组件开始编码了,如:
<template>
<div>
<Button type="primary">Button</Button>
<MyPanel title="Title">Content</MyPanel>
</div>
</template>
<script>
import {Button} from 'element-ui'
import {MyPanel} from '$ui'
export default {
components: {
Button,
MyPanel
}
}
</script>
调用组件库功能示例工程 https://gitee.com/newgateway/my-example

FAQs
MY前端基础框架核心组件库
The npm package @xdh/my receives a total of 289 weekly downloads. As such, @xdh/my popularity was classified as not popular.
We found that @xdh/my demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.

Research
Five malicious NuGet packages impersonate Chinese .NET libraries to deploy a stealer targeting browser credentials, crypto wallets, SSH keys, and local files.

Security News
pnpm 11 turns on a 1-day Minimum Release Age and blocks exotic subdeps by default, adding safeguards against fast-moving supply chain attacks.