
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
支持vue项目/react项目/普通js项目 创建 调试 和 打包
npm install -g dhcli
sudo npm install -g dhcli
建议先自行创建项目目录,如找不到项目目录会自动根据项目名创建目录
cli init
npm run dev
npm run build-qa
npm run build
项目初始化需要开发者输入package.json中的一些字段,如需要自动在gitlab创建项目请输入你的gitlab地址和一个有效的Private token,这将会自动在你的gitlab上创建此项目并关联到本地git
如不输入tab名,将自动以当前tag名+时间戳的方式命名!
编译成功后会自动打git tag,需要开发者自行输入tag名,编译测试包tag名以d开头,生产包tag名以p开头。
FAQs
This is a cli for dahai
We found that dhcli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.