
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
chevip-fe-utils
Advanced tools
npm i chevip-fe-utils
yarn add chevip-fe-utils
pnpm add chevip-fe-utils
import { mileageFormat } from 'chevip-fe-utils';
...
// 里程格式化
const mileage = '12.34';
console.log(mileageFormat(mileage)); // 输出:"12.34万公里"
console.log(mileageFormat('-1')); // 输出:"仪表盘已损坏"
依赖安装
npm i
代码格式化(已配置 VsCode 保存时自动格式化当前文件)
npm run format
语法检测
npm run lint
单元测试
npm run jest
生成接口文档
npm run docs
编译 TS 文件,生成的 JS 文件会被放到 dist 目录下
npm run build
自动化测试(格式化代码+lint)+单元测试
npm test
构建项目(自动化测试 + 编译 TS + 生成接口文档)
npm run release
生成接口文档
npm run docs
按照协定,新包发布都使用 release
分支进行!
开始请,请先把代码合并到 release
分支,并切换到 release
分支后再进行以下操作!
# 保证所有测试用例都通过且无报错
npm run release
git changelog
(如果报错说这个命令不存在,需要先安装插件 git-extras)npm publish
(如果是第一次发布,可能需要先登录 npm)# release 分支代码更新提交并打 Tag
git release x.y.z
main
分支一切都完成后,请别忘记把 release
分支合并到 main
分支,建议通过 MR 进行合并。
文档配置在测试环境中,只有内网可以查看。目前代码仓库已配置 CI/CD 自动化部署,只需 Push 到 release
分支即可。
FAQs
We found that chevip-fe-utils demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.