
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
@zat-design/sisyphus-vue-mobile
Advanced tools
众安科技 H5 业务组件库
# 本地运行
$ npm run dev
# 打包(支持单组件打包 在packages对应目录下执行)
$ npm run build
# 文档预览
$ npm run preview
#### 项目 packages
## 启动项目
packages
├── ProImageUpload
│ ├── components.d.ts
│ ├── demo // demo 目录
│ │ ├── index.md
│ │ └── normal.vue
│ ├── env.d.ts
│ ├── index.ts
│ ├── package.json
│ ├── src
│ │ ├── index.ts
│ │ └── index.vue
│ ├── tsconfig.json
│ ├── vite.config.ts
│ └── yarn.lock
我们的代码风格都使用: 两个空格缩进 vscode 的 eslint 插件控制。
注意代码风格,请按照 eslint 规范写代码。 提交之前修复所有的语法问题
基础语法风格:
命名习惯
vue 组件全部帕斯卡(大驼峰)命名 BarFoo 首字母大写
views 下面的页面使用小驼峰命名 barFoo
page 页面的 name 字段用两个单词大驼峰 UserDetail、AgendaList
函数以动词开头 如:getOrderDetail, setUserName 等
获取数据方法命名 getData (保持全局统一)
常量用全大写字符,两个单词间用下划线连接 如:ORDER_TYPES
样式命名 -使用 BEM 命名约定,避免 CSS 样式的冲突和混淆
如:nut-address__header__title, - 表位置或局部的 用 top left right bottom header footer side nav menu 等 - 项目中已经有的约定命名: - 简写
mb20, mt20, ml10, mr10: margin-top/bottom/left/right 等
tar,tac,tal: text-align: right/center/left - 常用“块”级命名
block-title,block-content: 在编写 标题+内容 块布局时约定的样式提取 - 其他参考 src/assets/styles/common/base.less
样式规范
vue 编程规范:
<script setup lang="ts">,尽量不用setup() {return{}}方式其他
新建页面模板
views/_template + index.vue注:demo 的 .vue 文件暂时不支持预览引入的文件
<!-- normal -->
::: Preview src="zat-button/normal"
:::
or
<!-- normal -->
<Preview src="zat-button/normal" />
组件需要暴露的组件或者方法 应该在目录下的 index.ts 中 和 zat-design 目录下 component.ts 文件导出
组件书写好注释(参考code-comments),插件会自动生成,只需要在 md 文件末尾加上 docgen 块,
:::docgen
:::
FAQs
> 众安科技 H5 业务组件库
We found that @zat-design/sisyphus-vue-mobile demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 15 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.