Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
@xtdev/tools-weapp
Advanced tools
npm install -g @xtdev/tools-weapp
根据你要执行的操作,执行不同的命令 ,其中 weapp 是小程序相关,file 是文件上传/压缩等
tTools file upload 你本地图片文件地址
控制台会返回上传结果:
文件上传成功: https://img.tanjiu.cn/home/C423076882516844.png
tTools less2css 源文件地址 目标地址
cd 您的工程目录
本地打包
NODE_ENV=test PRIVATE_KEY=xxx tTools weapp build
本地预览
NODE_ENV=test PRIVATE_KEY=xxx tTools weapp preview
Note: 这里的NODE_ENV是打包环境,默认是test。PRIVATE_KEY是微信后台生成的证书。
上传wxml内引用的图片,并替换成CDN地址。(建议执行前先commit代码)
tTools weapp imageUpload
FAQs
#### 安装 ` npm install -g @xtdev/tools-weapp `
The npm package @xtdev/tools-weapp receives a total of 6 weekly downloads. As such, @xtdev/tools-weapp popularity was classified as not popular.
We found that @xtdev/tools-weapp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.