
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
从JavaScript代码里提取注释生成项目文档。注释规范及示例请移步到 mokdoc项目官网 查阅。
npm install mokdoc
mokdoc.config.set(projectName, conf) - 设置项目名称和对应的配置信息。
mokdoc.start(projectName, [callback]) - 开始生成文档。
下载默认的文档展示包 mokdoc-view ,放到你的任意磁盘目录下,然后将doc_path指到mokdoc-view里。
var mokdoc = require('mokdoc');
mokdoc.config.set('air', {
path: 'D:/ws/air/trunk', //源代码路径
doc_path: 'D:/zzz', //文档数据保存到哪里(要放到文档展示包里)
exclude_list: ['/test/', '/util/xxx.js']
});
mokdoc.start('air', function(){
console.log('Yes, done!');
});
//可以给默认的标签设置别名
var mokdoc = require('mokdoc');
mokdoc.config.set('air', {
path: 'D:/ws/air/trunk',
doc_path: 'D:/zzz',
//标签别名与标签的映射
alias2tagid: {
'return': 'r',
'version': 'ver' //设置后version与ver等效,两个标签都可以使用
}
});
path - 源代码路径
doc_path - 文档数据保存到哪里(要放到文档展示包里)
charset - 源代码的文件编码。可选,默认utf8
alias2tagid - 标签别名与标签的映射。可选
file_ext - 只提取指定类型文件的注释。可选,默认.js
exclude_list - 排除列表(数组),排除文件路径(包含文件名)中出现该列表指定的字符串的文件。可选
air组件库API:http://mokjs.com/air-api
请看 CHANGELOG.md
FAQs
The npm package mokdoc receives a total of 11 weekly downloads. As such, mokdoc popularity was classified as not popular.
We found that mokdoc demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.