
Research
/Security News
npm Author Qix Compromised via Phishing Email in Major Supply Chain Attack
npm author Qix’s account was compromised, with malicious versions of popular packages like chalk-template, color-convert, and strip-ansi published.
npm i dawn -g
Dawn 取「黎明、破晓」之意,原为「阿里云·业务运营团队」内部的前端构建和工程化工具,现已完全开源。它通过 pipeline
和 middleware
将开发过程抽象为相对固定的阶段和有限的操作,简化并统一了开发人员的日常构建与开发相关的工作。
$ npm install dawn -g
# 1. 创建 & 初始化
$ dn init -t front
# 2. 开发 & 实时编译
$ dn dev
# 3. 语法检查 & 测试
$ dn test
# 4. 构建 & 打包
$ dn build
# 启动开发服务
dev:
- name: webpack
entry: ./src/*.js
template: ./assets/*.html
watch: true
- name: server
port: 8001
# 直接构建
buid:
- name: webpack
entry: ./src/*.js
template: ./assets/*.html
FAQs
dawn cli
The npm package dawn receives a total of 44 weekly downloads. As such, dawn popularity was classified as not popular.
We found that dawn demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
npm author Qix’s account was compromised, with malicious versions of popular packages like chalk-template, color-convert, and strip-ansi published.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.