
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
将前端开发从MVC框架的各种路由中解脱出来,能坐着就别站着,能躺着就不要坐着。
* 新建html模板即可实现路由自动映射
* 通过配置文件实现ajax请求
* 所有操作无需重启Express
##DEMO
var express = require('express');
var app = express();
var init=require('YJS');
.
.
app.use(init.ReadConFigFile());
.
.
// 初始化自动路由映射
init.init(app);
app.listen(3000)
将YJS安装到本地计算机
$ npm install -g YJS
##配置文件
{
"defaultActionName": "index", //每个controller的入口action名称,即每个文件夹下的默认html名称,如:/login路由会转到:/login/index
//模板配置
"layout": {
"default-layout": "new_layout", //默认模板页,如果不在后续指定则使用该模板页
"todolist/index": "[none]", //指定todolist/index路由的页面不适用任何模板
"login/index": "default" //指定login/index路由的页面使用default模板
},
//ajax实现代码
"ajax": {
"todolist/getlist": ["这是我的list","这是我的list","这是我的list","这是我的list","这是我的list","这是我的list","这是我的list","这是我的list"],
"todolist/getlist2": {
"ajaxRepeat": 3, //该条数据重复多少遍返回给客户端,对于频道页、瀑布流等页面很有用
"ajaxData": {"one":"one","two":"two","three":"three"} //数据体
},
"haha3": [1,2,3,4,5,6,7,8,9,0],
"hah4": [1, 2, 3, 4, 5, 6, 7, 8, 8, 7, 6, 5, 4, 32, 1],
"haha/haha": [1, 2, 3, 4, 5, 6, 7, 8, 8, 7, 6, 5, 4, 32, 1],
"haha/haha2": [1, 2, 3, 4, 5, 6, 7, 8, 8, 7, 6, 5, 4, 32, 1],
"login/issuccess":true,
"login/issuccess2":false,
"login/issuccess3":false,
"login/issuccess4":{
"ajaxRepeat":10,
"ajaxData":{"one":"one,^_^","two":"two^_^","three":"three^_^"}
}
}
}
2015-3-31 0.0.4版本:实现动态获取已存在的action、ajax,在app.js中只需添加YJS.init(app);
2015-3-31 0.0.5版本:在前版基础上,添加源代码注释以及格式规范化;
2015-3-31 0.0.6版本:在前版基础上,简化用户调用代码,具体详见DEMO部分;
2015-3-31 0.0.7版本:在前版基础上,在配置文件中添加空模板选项;
2015-3-31 0.0.8版本:在前版基础上,增加了根据环境参数是否启动动态配置文件、日志功能;
2015-3-31 0.0.9版本:在前版基础上,代码优化;
2015-3-31 0.1.0版本:在前版基础上,增加404页面优化,并修改了新建ajax转向中的bug;
2015-3-31 0.1.1版本:在前版基础上,修改了controller自动识别bug;
2015-3-31 0.1.2版本:在前版基础上,代码优化;
2015-3-31 0.1.3版本:在前版基础上,新增了partials自动重载;
2015-4-14 0.1.4版本:在前版基础上,新增了partials自动重载;
2015-4-14 0.1.5版本:在前版基础上,新增了partials自动重载;
2015-4-14 0.1.6版本:在前版基础上,删除了partials自动重载;
2015-4-14 0.1.7版本:在前版基础上,增加mustache模板遍历数据源配置;
2015-4-14 0.1.8版本:在前版基础上,优化mustache模板数据配置;
2015-4-15 0.1.9版本:在前版基础上,增加mustache配置独立,使得mustache配置独立为文件形式;
2015-4-15 0.2.0版本:在前版基础上,使用户不比一定要写文件全名,可以不加后缀;
2015-4-15 0.2.1版本:在前版基础上,增加模板路径的通用匹配符,在配置模板对应路径的时候可以用'ctroller/*'来匹配某个ctroller下所有action的对应模板;
2015-4-15 0.2.2版本:在前版基础上,用户配置文件可以放入子文件夹中;
[MIT](LICENSE)
虽然代码很屎,但违版必究,我说真的,我真的说真的!(LICENSE)
FAQs
YJS
We found that YJS demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.