
Security News
Google’s OSV Fix Just Added 500+ New Advisories — All Thanks to One Small Policy Change
A data handling bug in OSV.dev caused disputed CVEs to disappear from vulnerability feeds until a recent fix restored over 500 advisories.
build-plugin-at-spa
Advanced tools
build-scripts 插件,支持基于at的业务开发。
"plugins": [
"build-plugin-ice-app",
"@ali/build-plugin-ice-def",
["build-plugin-at-spa", { "theme": "teambition" }]
]
在项目目录的build.json
中配置该插件。
theme
为添加的业务类型,可选值为'teambition'(tb),'apsara'(专有云),'infra'(天基),默认值为 'teambition'。
modifyVars
可修改scss变量的值,变量详见 https://design.teambition.com/color:
对亮暗色均生效:
{
"modifyVars": {
"gray-08": "#303040"
}
}
区分亮暗色生效
{
"modifyVars": {
"normal": {
"gray-08": "#303040"
},
"dark": {
"gray-08": "#404030"
}
}
}
commonSassResources
,用于设置sass-resources-loader的options.resources
,可以将一些通用的sass资源(mixin,function等)自动注入到每个scss
文件中,避免手动引入。
teamixPrefix
,用于业务中 AT 和 @teamix/ui 组件并存,且修改了 @teamix/ui 组件 prefix,并对 @teamix/ui 基础组件做了样式 hack 的情况。用法为:
"plugins": [
["build-plugin-at-spa", { "teamixPrefix": "yx-" }]
]
插件会将 teamixPrefix
作为 $teamix-prefix 变量注入,业务组件或业务工程在 hack 基础组件时代码需写成:
$teamix-prefix: 'next-' !default;
.#{$teamix-prefix}btn-text {
color: var(--color-fill1-6, #8b8b8b) !important;
}
若需要进行暗色模式的开发,build-scripts start --dark
,同时修改public/index.html
中
teambition.min.css
或apsara.min.css
为teambition-dark.min.css
或apsara-dark.min.css
。
若要进行亮暗色同时构建,
build-scripts build --dm
,构建产物中[name].js
、[name].css
为亮色主题对应资源文件,[name]-dark.js
、[name]-dark.css
为暗色色主题对应资源文件。
若需要在start时指定publicPath,
build-scripts start --devPublicPath=xxxx
FAQs
build-scripts for at spa
We found that build-plugin-at-spa demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A data handling bug in OSV.dev caused disputed CVEs to disappear from vulnerability feeds until a recent fix restored over 500 advisories.
Research
/Security News
175 malicious npm packages (26k+ downloads) used unpkg CDN to host redirect scripts for a credential-phishing campaign targeting 135+ organizations worldwide.
Security News
Python 3.14 adds template strings, deferred annotations, and subinterpreters, plus free-threaded mode, an experimental JIT, and Sigstore verification.