
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
前端开发环境
编译es6789到es5
支持async/await
支持class属性定义
支持可选链
私有特性,自动编译js中{pug[...]pug}的pug代码为html
//foo.js
let template;
template="{pug[div: img]pug}`"
//template="<div><img/></div>"
template="{pug[$foo.pug]pug}`"
//foo.pug中的内容为"div: img"
//template="<div><img/></div>"
//以上语句等价于
template="{pug[]pug}`"
//使用绝对位置置入pug
template="{pug[/src/$foo.pug]pug}`"
编译less到css
pug到html
安装
npm install jtrans
或者
yarn add jtrans
全局安装
npm install -g jtrans
使用
jtrans dev
所有配置
jtrans dev
jtrans watch
# 所有配置
jtrans build --src=src --dist=dist --build-clean --disabled-treeshake --port=4560 --src-base=src
FAQs
The npm package jtrans receives a total of 1 weekly downloads. As such, jtrans popularity was classified as not popular.
We found that jtrans demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.