
Research
/Security News
Shai Hulud Strikes Again (v2)
Another wave of Shai-Hulud campaign has hit npm with more than 500 packages and 700+ versions affected.
一套比较全面的OPOA应用解决方案,用于快速启动一个单页应用。该项目已经完成大部分基础架构类的设计,只需要下载下来稍做修改即可。
我希望实现以下功能:
引入库包管理,稳定良好的文件组织结构
支持构建压缩,提供hook自定义构建打包任务
内置服务器,提供请求转发,livereload
热部署功能
增量发布,统一使用版本号区分资源
需要考虑哪些问题?
项目的自动化构建,包括是库文件管理,库之间的依赖关系,代码的压缩合并
还有静态资源的版本号
URL的设计文件的组织结构保持高度统一
还有很多...
项目使用 RequireJS + Bootstrap + Angular 开发模式
前端库采用 bower 管理,因此使用前请前往 http://bower.io 下载安装
目录结构
├── README.md
├── app/ // 应用代码
│ ├── config.js // requireJS依赖配置
│ ├── css/ // 样式
│ ├── js/
│ │ ├── app/
│ │ ├── app.js
│ │ ├── routes.js // 路由规则
│ │ ├── startup.js
│ └── page/
│ └── tpl/ // 静态模板
├── bower.json
├── index.html // 统一入口
├── package.json
├── Gruntfile.js
└── tool/
使用方法
npm install -g bower grunt
git clone git@github.com:mycoin/ec-biz.git && cd ec-biz
grunt server
使用浏览器打开 http://127.0.0.1:8787
grunt来管理项目,目前不支持构建FAQs
We found that ec-biz demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Another wave of Shai-Hulud campaign has hit npm with more than 500 packages and 700+ versions affected.

Product
Add real-time Socket webhook events to your workflows to automatically receive software supply chain alert changes in real time.

Security News
ENISA has become a CVE Program Root, giving the EU a central authority for coordinating vulnerability reporting, disclosure, and cross-border response.