
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
mini-program-axios
Advanced tools
小程序原生网络请求api没有类似axios请求类库的一些功能,如:请求,响应拦截器功能,以及没有请求,响应数据转换功能;mini-program-axios是一个类似axios的请求模块,默认支持微信,支付宝小程序,如果你还需要支持其他小程序,你需要更新请求适配器adapter
| 功能点 | axios | mini-program-axios |
|---|---|---|
| 适配器 | 默认支持浏览器与node端 | 默认支持微信,支付宝小程序端 |
| 请求/响应拦截器 | 支持 | 支持 |
| transformRequest | 支持 | 支持 |
| 处理headers['content-type'] | 根据请求数据data | 小程序原生处理 |
| transformResponse | 支持(可模拟响应数据结构,测试非常有用) | 支持(可模拟响应数据结构,测试非常有用) |
| get,post,put...快捷方法 | 支持 | 不支持,与小程序原生api用法保持一致 |
备注:小程序请求api设置请求超时无效
npm i mini-program-axios -S
yarn add mini-program-axios
import axios from 'mini-program-axios'
/**
* 小程序请求默认配置
* api文档:https://opendocs.alipay.com/mini/api/owycmh
*/
const request = axios.create({
timeout: 30000, // ms
dataType: 'json',
method: 'GET',
headers: {
'content-type': 'application/json'
},
});
// 设置请求拦截器,响应拦截器
request.interceptors.request.use(
setRequestConfig,
error => Promise.reject(error)
);
request.interceptors.response.use(
handlerResponse,
error => Promise.reject(error)
);
request.interceptors.response.use(
data => data,
error => Promise.reject(error)
);
// 同微信/支付宝小程序请求参数
request({
url: '/api/xxx',
method: 'POST',
data: {},
headers: {},
dataType: 'json',
})
.then(res => {
// TODO res
})
.catch(err => {
// TODO err
})
FAQs
We found that mini-program-axios demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.