Security News
Research
Supply Chain Attack on Rspack npm Packages Injects Cryptojacking Malware
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
cmui-gearbox
Advanced tools
Lightweight JavaScript utilities for web development, based on
_
(Underscore) and$
(jQuery/Zepto).
为 Web 开发打造的轻量级 Javascript 工具库,基于
_
(Underscore)和$
(jQuery/Zepto)。
支持以下移动平台的主流浏览器:
同样支持以下桌面浏览器:
_
(Underscore 1.6+)$
(Zepto 1.1+ 或 jQuery)通过 npm 3 安装:
$ npm install cmui-gearbox
在页面中加载 Gearbox 以及必要的依赖:
<script src="node_modules/underscore/underscore-min.js"></script>
<script src="node_modules/zepto.js/dist/zepto.min.js"></script>
<script src="node_modules/cmui-gearbox/dist/gearbox.min.js"></script>
所有文档入口在 Wiki 页面,快去看吧!
移动 UI 框架 CMUI 采用 Gearbox 作为全局的工具库,因此所有 CMUI 用户都在使用它:
以下桌面网站也在用 Gearbox:
Gearbox 的部分功能模块已经分离出去,成为独立项目。这些模块以开发依赖的方式引入,并打包到发布文件中。因此,参与这些独立项目的开发即可修改这些模块。
gearbox.action
- Actiongearbox.template
- Underscore-templatenpm install
,安装必要的依赖。npm run dist
,运行构建脚本。/dist
目录下。bower install
,安装必要的依赖。test/test-dev.html
- 测试源码(用于开发阶段的测试)test/test-dist-trad.html
- 测试发布文件(用于测试 Zepto 的兼容性)test/test-dist-trad-jquery.html
- 测试发布文件(用于测试 jQuery 的兼容性)FAQs
Lightweight JavaScript utilities for web development.
The npm package cmui-gearbox receives a total of 2 weekly downloads. As such, cmui-gearbox popularity was classified as not popular.
We found that cmui-gearbox demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.
Security News
Sonar’s acquisition of Tidelift highlights a growing industry shift toward sustainable open source funding, addressing maintainer burnout and critical software dependencies.