
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
fit2cloud-ui-plus
Advanced tools
FIT2CLOUD UI PLUS是基于Element Plus二次开发的Vue 3组件库,提供企业软件开发时常用的组件
npm install fit2cloud-ui-plus
使用时需要安装Element Plus
npm install element-plus --save
因为需要使用scss,所以需要安装sass
npm install -D sass sass-loader
如果使用element plus的icon,根据element plus文档安装
npm install @element-plus/icons-vue
import { createApp } from 'vue'
import App from './App.vue'
import ElementPlus from 'element-plus'
import Fit2CloudPlus from 'fit2cloud-ui-plus';
import "fit2cloud-ui-plus/src/styles/index.scss"; // 已经包含了element plus的scss
import * as ElementPlusIconsVue from '@element-plus/icons-vue' // element plus的icon需要另安装
const app = createApp(App)
app.use(ElementPlus)
app.use(Fit2CloudPlus)
for (const [key, component] of Object.entries(ElementPlusIconsVue)) {
app.component(key, component)
}
app.mount('#app')
文档地址:https://fit2cloud-ui.github.io/fit2cloud-ui-plus/
Copyright (c) 2014-2026 FIT2CLOUD 飞致云, All rights reserved.
Licensed under The GNU General Public License version 3 (GPLv3) (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at
https://www.gnu.org/licenses/gpl-3.0.html
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an " AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
FAQs
FIT2CLOUD UI PLUS是基于Element Plus二次开发的Vue 3组件库,提供企业软件开发时常用的组件
The npm package fit2cloud-ui-plus receives a total of 1,702 weekly downloads. As such, fit2cloud-ui-plus popularity was classified as popular.
We found that fit2cloud-ui-plus demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.