
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
basic-lib-ele
Advanced tools
手动引入 basic-init 初始化工具
package.json scripts 上加入
"init": "babel-node --presets env ./node_modules/qh-init/"
npm run int 命令初始化项目, _routre.js文件为路由文件npm run build 部署后参考 nginx 知识整合项目中 proxy 节点中的服务配置, nginx 注意路径中/的意义渲染一个标准表单
| 参数名 | 说明 | 类型 | 默认值 |
|---|---|---|---|
| size | 表单尺寸 | string | - |
| labelWidth | 文本宽度 | string | - |
| readOnly | 是否只读 | bool | false |
| disabled | 是否不可编辑 | bool | - |
| on | 响应事件 | json | {} |
| form | 表单项(主要配置), json 内的 key 代表控件绑定数据和获取数据的 key,json 单独对象的配置参照 form-item | json | {} |
| 参数名 | 说明 | 类型 | 默认值 |
|---|---|---|---|
| txt | 文本标签 | string | - |
| right | 右侧 tip | string/object(txt,style) | - |
| bottom | 底部 tip | string/object(txt,style) | - |
| top | 顶部 tip | string/object(txt,style) | - |
| el | 控件 | 控件 | input |
| change | 控件值变更事件 | function | - |
| config | 控件配置(具体配置内容根据参考当前使用控件的文档) | json | - |
| rule | 表单验证 | json | - |
| 方法名 | 说明 | 入参 | 返回值 |
|---|---|---|---|
| getDatas | 获取 json 格式表单内容 | key:获取 key, 不传则获取全部 | 有 key 则返回单一值得,没有则返回整个表单的 json 数据 |
| setDatas | 设置表单内容 | data:绑定值;key:绑定的 key | - |
| valiDates | 表单校验 | key:校验字段(字符或数组);callback:通过校验的回调函数 | - |
| submit | 校验并在成功后提交表单 | callback:校验成功回调;success:提交成功回调 | - |
| $con | 获取表单内控件对象 | key:获取控件的 key | - |
FAQs
基于element的二次集成框架
We found that basic-lib-ele demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.