
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@xunserver/cli
Advanced tools
xs具有创建项目脚手架、快速生成store、页面、request等的全功能命令行工具, 基于commander实现。参考git命令行实现,[]表示可选的参数,<>表示必填参数。选项支持缩写的形式,所有缩写的选型均是大写。
npm i -g @xunserver/cli
初始化项目,默认支持git仓库和npm仓库下载,详情参考命令行提示,-h 或者--help。git仓库默认从xunserver/xunserver-template-xxx 下载,npm 仓库从xunserver-template 下载。
通过问询的方式添加项目lint规则,使用会在项目中添加响应的lint规则, 包括eslint、stylelint、prettier、commitlint和editorconfig规则。
支持配置文件配置打包细节
通过获取当前目录下的配置文件
仅支持cjs格式的配置文件,.xsrc.js 或者xs.config.js。 或者通过--config filename 指定配置文件
interface BuildFunction {
(config: XsConfig): any;
}
interface XsConfig {
type: 'vue' | 'vue2' | 'react' | 'common';
typescript: boolean; // default true
build: Boolean | BuildFunction | { // 默认是webpack配置,会和默认配置合并,支持函数自定义打包和rollup打包
[key: string]: any
},
pub: boolean | Function | {
git: boolean | { // 是否支持自动提交git
origin?: string; // 需要上传的仓库名,默认origin
branch?: string; // 默认 main
commitMsg?: string | ((package:any) => string) // 默认当前 `${packageJson.name} pub ${packageJson.version} + 1`
},
npmToken?: string // npm 发布秘钥,如果未配置,从APP_NPM_TOKEN获取
},
server: { // 如果type是
[key: string]: any
}
}
FAQs
xs 前端脚手架工具,用于快速生成项目
We found that @xunserver/cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.