
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@yangzw/bruce-std
Advanced tools
请查看Bruce FEES或@yangzw/bruce-std的文档
以下均为过去开发记录,不再维护
config文件夹中的xxxrc.ts使用export = XXX的形式导出src文件夹中的脚本使用.mts作为文件后缀,内部文件引用使用xxx/yyy/abc.mjs的形式package.json不要设置type为moduletsconfig.json使用两种形式,tsconfig.json用于编译src文件夹,tsconfig.config.json用于编译config文件夹{
"main": "dist/index.mjs",
"bin": {
"bruce-std": "dist/index.mjs"
},
"scripts": {
"build": "rimraf dist && tsc -p tsconfig.config.json && tsc -p tsconfig.json",
"dev": "nodemon -w config -w src -w package.json -w tsconfig.json -e ts,mts -x \"npm run build\""
}
}
// tsconfig.json
{
"compilerOptions": {
"allowJs": true,
"allowSyntheticDefaultImports": true,
"baseUrl": ".",
"downlevelIteration": true,
"esModuleInterop": true,
"experimentalDecorators": true,
"forceConsistentCasingInFileNames": true,
"jsx": "preserve",
"lib": [
"DOM",
"DOM.Iterable",
"ES2015",
"ES2016",
"ES2017",
"ES2018",
"ES2019",
"ES2020",
"ES2021",
"ES2022",
"ES2023",
"ES2024",
"ESNext"
],
"module": "ESNext",
"moduleResolution": "node",
"outDir": "dist",
"removeComments": true,
"resolveJsonModule": true,
"sourceMap": false,
"strict": true,
"target": "ES6"
},
"exclude": [
"node_modules"
],
"include": [
"src"
]
}
// tsconfig.config.json
{
"compilerOptions": {
"allowJs": true,
"allowSyntheticDefaultImports": true,
"baseUrl": ".",
"downlevelIteration": true,
"esModuleInterop": true,
"experimentalDecorators": true,
"forceConsistentCasingInFileNames": true,
"jsx": "preserve",
"lib": [
"DOM",
"DOM.Iterable",
"ES2015",
"ES2016",
"ES2017",
"ES2018",
"ES2019",
"ES2020",
"ES2021",
"ES2022",
"ES2023",
"ES2024",
"ESNext"
],
"module": "CommonJS",
"moduleResolution": "node",
"outDir": "dist",
"removeComments": true,
"resolveJsonModule": true,
"rootDir": "config",
"sourceMap": false,
"strict": true,
"target": "ES5"
},
"exclude": [
"node_modules"
],
"include": [
"config"
]
}
eslint-config-standard-with-typescript v38-,tslint配置需要做一些调整。
import { join } from "node:path";
export default {
parserOptions: {
project: "tsconfig.config.json",
tsconfigRootDir: join(__dirname, "..")
}
}
eslint-config-standard-with-typescript v38+,tslint配置需要做一些调整。
import { cwd } from "node:process";
export default {
parserOptions: {
project: "tsconfig.json",
tsconfigRootDir: cwd()
}
}
每个项目目录中必须存在tsconfig.json且其配置需要做一些调整。
{
"include": [
"src"
]
}
Eslint的parserOptions配置请参考这里。
FAQs
A VSCode configuration tool with integrated code verification
We found that @yangzw/bruce-std demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.