Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
maishu-chitu
Advanced tools
采用TypeScript编写的轻量级单页面类库,帮助开发人员编写易维护的大规模项目。采用面向对象,事件驱动的编程模式。
它的关注点在于页面的加载,切换,以及页面间数据的交互。
作者在开发这个 ChiTu 的时候,简单是他所坚持的原则之一。这里说的简单并非简陋,而是功能性的单一,它只专注于页面的加载。
ChiTu 框架采用面向对象,事件驱件的编程模式,各个模块间解藕合理,整个类库很容易进行扩展。
Chitu 可以很方便和其它第三方框架配合使用,例如:REACT, VUE
常规引用
<script type="text/javascript" src="js/chitu.js"></script>
使用 requirejs 加载
requirejs(['js/chitu.js'])
本项目是使用 Grunt 来生成项目,所以需要安装 Grunt 。
FAQs
采用TypeScript编写的轻量级单页面类库,帮助开发人员编写易维护的大规模项目。采用面向对象,事件驱动的编程模式。
The npm package maishu-chitu receives a total of 10 weekly downloads. As such, maishu-chitu popularity was classified as not popular.
We found that maishu-chitu demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.