Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
atm3 面向前端的工程构建系统。解决前端工程中性能优化、资源加载(异步、同步、按需、预加载、依赖管理、合并、内嵌)、模块化开发、自动化工具、开发规范、代码部署等问题。
如果对FIS先有些了解,但理解不深的,可试着带着这句话去看文档
atm3 会在配置文件中给文件添加相应属性,用于控制文件的编译、合并等各种操作;文件属性包括基本属性和插件属性,详细请参考
npm install -g atm3
快速入门、配置、插件开发以及原理等文档 doc/docs/INDEX.md
mkdir my-proj
cd my-proj
atm3 init
atm3 release
atm3 server start --type node
fis-conf.js 的例子
// default settings. atm3 release
// Global start
fis.match('*.{js,css}', {
useHash: true
});
fis.match('::image', {
useHash: true
});
fis.match('*.js', {
optimizer: fis.plugin('uglify-js') // js 压缩
});
fis.match('*.css', {
optimizer: fis.plugin('clean-css') // css 压缩
});
fis.match('*.png', {
optimizer: fis.plugin('png-compressor') // png 图片压缩
});
// Global end
// default media is `dev`
fis.media('dev')
.match('*', {
useHash: false,
optimizer: null
});
// extends GLOBAL config
fis.media('production');
https://github.com/femxd/atm3-demo
###优化类(插件属性:optimizer)
###预处理类(插件属性:parser)
FAQs
atm3 base fis3
We found that atm3 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.