
Security News
GitHub Actions Checkout Now Blocks Risky pull_request_target Checkouts
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.
1 确定需要发布的资源文件以ToPo为例在index.ts中引入并暴露组件,例如组件名称定义为AuxTopoPreview ,暴露install方法注册app.use()用
2 编写完成后执行打包依赖,生成dist目录文件
npm run build
npm config get registry
npm config set registry https://registry.npmjs.org/
npm config set proxy http://[IP]:[Port]
npm config set https-proxy http://[IP]:[Port]
npm adduser
npm publish
import { AuxTopoPreview } from 'aux-comp'; //也可在main.js全局引入app.use(),因为暴露了install方法
FAQs
前端-npm共享资源库(内部组件含特定资源生效,他人使用无效)
The npm package aux-comp receives a total of 18 weekly downloads. As such, aux-comp popularity was classified as not popular.
We found that aux-comp demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.