
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
k-designer
Advanced tools

📦github仓库:https://github.com/Kchengz/k-designer
📦gitee仓库:https://gitee.com/kcz66/k-designer
💎文档地址:https://kcz66.gitee.io/k-designer/
可以简称K设计器,是一个功能强大、开箱即用的拖拽式低代码设计器。它基于 Vue3 开发,兼容多套 UI 组件库,除了基础的页面设计功能,KDesigner 还提供了强大的扩展功能,可以让开发者根据自己的需求自由扩展和定制组件。此外,KDesigner 使用 JSON 配置来生成页面,可帮助开发者快速生成页面,提高开发效率。它提供了两个重要组件:k-designer 设计器和 k-builder 生成器。
k-designer 是一个可视化设计器组件,用户可以通过拖拽组件的方式快速生成 JSON 配置。它提供了丰富的组件库和配置项,用户可以根据需要选择合适的组件并配置相应的属性、事件和动作。设计器还提供了实时预览功能,用户可以随时查看所设计页面的效果。最终,用户可以将 JSON 配置导出,用于页面的生成和修改。
k-builder 是一个页面构建组件,它可以将设计器生成的 JSON 配置构建成页面,完成组件的渲染、事件绑定和数据回显等操作。
npm i k-designer
k-designer 目标是支持多 UI 兼容,目前支持以下 UI
npm i element-plus
main.ts 或者 main.js 引入注册组件
// 引入Element plus样式
import "element-plus/dist/index.css";
// 引入k-designer样式
import "k-designer/dist/style.css";
import { pluginManager } from "k-designer";
import { setupElementPlus } from "k-designer/dist/ui/elementPlus";
// 注册Element UI
setupElementPlus(pluginManager);
npm i ant-design-vue
main.ts 或者 main.js 引入注册组件
// 引入antd UI样式
import "ant-design-vue/dist/antd.css";
// 引入k-designer样式
import "k-designer/dist/style.css";
import { pluginManager } from "k-designer";
import { setupAntd } from "k-designer/dist/ui/antd";
// 使用Antd UI
setupAntd(pluginManager);
npm i naive-ui
main.ts 或者 main.js 引入注册组件
// 引入k-designer样式
import "k-designer/dist/style.css";
import { pluginManager } from "k-designer";
import { setupNaiveUi } from "k-designer/dist/ui/naiveUi";
// 注册Naive Ui
setupNaiveUi(pluginManager);
<template>
<div class="h-full">
<KDesigner />
</div>
</template>
<script setup lang="ts">
import { KDesigner } from "k-designer";
</script>
<style>
.h-full {
height: 100vh;
}
</style>
点击链接加入 qq 群聊
FAQs
基于vue3的设计器,可视化开发页面表单
The npm package k-designer receives a total of 65 weekly downloads. As such, k-designer popularity was classified as not popular.
We found that k-designer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.