
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
@zzwing/vue-fixed-table
Advanced tools
功能:
解决问题:
后台系统的列表页中,如果不做处理 在内容过多情况下.会引起页面滚动.同时会撑开页面. 表头/两侧会滚动条隐藏掉.不利于数据的展示
解决方法:
vue@2.4.4git clone
cd dir,执行
npm install
完成依赖包安装
开发环境(访问 http://localhost:8082/demo/)
npm run dev
生产环境
npm run build
固定表头, 左侧以及右侧
需要通过一定的slot插入相应的内容达到固定
| props | 类型 | 默认 | 描述 |
|---|---|---|---|
| offsetLeft | String, Number | 0 | 左侧偏移 |
| offsetTop | String, Number | 0 | 顶部偏移 |
| scrollTarget | Object, String | 无 | 滚动容器, 可传dom元素或者选择器, 没有默认为window, 既全局滚动.(DEMO1和2) |
| useTrans | Boolean | false | 是否使用动画做回退方案, 在safari和firefox下会有闪动. 所以safari和firefox默认开启. |
| selfScroll | Boolean | false | 是否自滚动. 垂直滚动会依赖全局, 横向滚动会依赖自身. 所以需要额外样式是的容器能产生横向的滚动条.(DEMO 3) |
需要通过slot插入到相应的插槽中, 通过对插槽的控制达到固定效果
| slot | 介绍 |
|---|---|
| leftThead | 左侧表头 |
| thead | 中间表头 |
| rightThead | 右侧表头 |
| leftBody | 左侧固定表体 |
| tbody | 表体 |
| rightBody | 右侧固定表体 |
| props | 类型 | 默认 | 描述 |
|---|---|---|---|
| dir | String | 'l' | 对齐方向 |
| tag | String | 'td' | 渲染的标签 |
虚拟的横向滚动条, 需要让容易自行产生横向滚动.
让容器在页面高度不足的时候, 也可以拖动横向滚动条.
一定要让容器产生横向滚动
FAQs
a vue-table component
The npm package @zzwing/vue-fixed-table receives a total of 2 weekly downloads. As such, @zzwing/vue-fixed-table popularity was classified as not popular.
We found that @zzwing/vue-fixed-table demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.