
Security News
Risky Biz Podcast: Making Reachability Analysis Work in Real-World Codebases
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
gitee-ent
Advanced tools
GiteeEnt 是码云企业版组件库,包含了企业版页面中用到的较为稳定的组件,源码目录结构和构建脚本参考自 element-ui。
npm install gitee-ent --save
先克隆此仓库到本地,然后使用如下命令:
# 进入 gitee-ent 源码目录
cd path/to/gitee-ent
# 构建开发版的资源
npm run dev
# 将当前 gitee-ent 目录链接到全局 node_modules 目录中
npm link
## 进入 gitee 主仓库的目录
cd path/to/gitee
# 将全局 node_modules 目录中的 gitee-ent 链接到当前 node_modules 目录中
npm link gitee-ent
注:如果在主库 npm run dev:projects
之后报错找不到 css 资源,那么先在当前仓库下执行 npm run build:css
,之后再到主库重新执行 npm run dev:projects
如果 webpack 构建报错找不到 gitee-ent 模块中的文件,可以试试修改 webpack 配置,在 resolve 配置中添加 symlinks: false
,禁止将符号链接解析为链接目标位置。
构建用于发布的资源:
npm run dist
在添加新组件后,需运行如下命令更新 src/index.js 文件:
npm run build:file
基础实用类的代码和组件代码是分开构建的,如果有改动 src 目录下的代码,则需要单独运行:
npm run build:utils
npm run new
创建组件目录结构常见的前端组件库的样式代码都是与组件代码分离的,这样做能方便用户自定义组件库的主题,例如:自定义主题色、字体、边框、阴影等样式。gitee-ent 是作为组件库来开发的,其目录结构和构建脚本参考自 Element UI,所以对 css 代码也有与 Element UI 类似的规范:
遵循码云前端的 ESLint 即可。
参考Git 提交信息规范文档。
当前主版本-pr编号.子版本
,例如:0.8.2-pr123.1
npm publish --tag=pr
命令发布该版本0.8.2-pr123.1
,递增后则为 0.8.2-pr123.2
1.x.x-beta.x
,如果当天有多次更新,则应该只递增 beta 后面的编号上线后的处理:
# 创建 beta 版的发行版
npm run release-beta
# 创建正式发行版
npm run release
# 发布测试版到 npm 服务器上
npm publish --tag=beta
# 发布正式版到 npm 服务器上
npm publish
发布 beta 版: 在创建的 PR 底下评论 Gitee Go Publish Beta 即可发布 v<verson>-beta-<构建ID>
的发行版
发布正式发行版: 在任意分支下执行 npm run release
即可发布正式版
FAQs
A component library for Gitee Enterprise
The npm package gitee-ent receives a total of 12 weekly downloads. As such, gitee-ent popularity was classified as not popular.
We found that gitee-ent demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 11 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.