Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@zhangqingcq/plug-r-qw
Advanced tools
plug-in lib developed when I was in qw
要看例子,需要下载github上项目,然后npm i
安装依赖,推荐使用cnpm或淘宝镜像,然后npm run serve
把项目跑起来,就可以在/index
查看各个组件或方法的示例了。
因为这个库里面包含UI组件,所以需要在main.js引用lab/plugRQw.min.css才能正常显示样式,如:import '@zhangqingcq/plug-r-qw/lib/plugRQw.min.css'
如果需要定制化样式(例如主题色),则需要创建一个less文件(如plugRQwTheme.less
,注意:这种情况下不再需要引入plugRQw.min.css),在该文件中顶部引入src/style/index.less (如:@import "~@zhangqingcq/plug-r-qw/src/style/index.less";
),然后在后面写上想要覆盖的变量名,并给出想要的值,如:@primary: #46be87;
默认颜色列表,默认尺寸列表
注意:
- 请不要随意改变这些变量,除非你很清楚改变后会带来的影响,他们在整个库中被多次使用。
- 因为该库是基于view-design封装的,所以很多样式继承了view-design,要定制那些样式,直接定制view-design即可。
improt {fullScreenImgPreview} from '@zhangqingcq/plug-r-qw'
FAQs
A JS lib base on Vue and View-design, you can achieve some complex functions with simple code after install this lib.
The npm package @zhangqingcq/plug-r-qw receives a total of 650 weekly downloads. As such, @zhangqingcq/plug-r-qw popularity was classified as not popular.
We found that @zhangqingcq/plug-r-qw demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.