
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
jarvis-react
Advanced tools
React 开发工具合集:
React 应用React 组件tsconfig eslint prettier 等配置[ ] 初始化项目/组件开发模板
[x] 初始化项目配置文件:tsconfig jsconfig perttier eslint stylelint editorconfig
[x] 使用 webpack-dev-server 本地开发应用
[x] 使用 webpack 打包应用
[x] 使用 babel 编译 CommonJS 格式的组件
[x] 使用 babel 编译 ESModules 格式的组件
[x] 使用 rollup 编译 UMD 格式的组件
[ ] 本地开发组件
$ npm install -g jarvis-react
jarvis init config
$ jarvis dev
$ jarvis build
在本地开发应用或组件时,支持自定义配置文件。在根目录下创建jarvis.config.js,内容如:
module.exports = {
mode: 'app',
};
设定当前开发模式
类型:"app" | "component"
默认值:"app"
设定输出文件夹
类型:string
当 mode 的值为 app 时,outDir 默认值为 dist
当 mode 的值为 component 时
liblibdist本地开发时启动的端口
类型:number
默认值:3000
本地代理 与 devServer 一致Proxy
proxy: {
'/api': {
target: 'https://other-server.example.com',
secure: false,
changeOrigin: true
},
}
是否输出 map 文件
类型: bollean
默认值: false
在 development 模式下,默认开启 sourceMap。production 时才会读取该配置项
配置 less 变量(主题)
类型:Record<string, string>
默认值:{}
// TODO antd 的主题支持
是否输出 UMD 格式包
类型:boolean
默认值:false
外链,指定使用外部方式加载的包(不会打包到源代码中)。仅在 umd 格式下生效
类型:string[]
默认值:`["react","react-dom"]
外部依赖的变量名称,与 external 一起使用。仅在 umd 格式下生效
默认值:
{
"react": "React",
"react-dom": "ReactDOM"
}
配置全局环境下的变量名称,如window.xxx
类型:string
默认值:package.json 下的 name 字段
FAQs
React脚手架及命令行工具合集
We found that jarvis-react demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.