
Security News
GitHub Actions Checkout Now Blocks Risky pull_request_target Checkouts
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.
nativelight
Advanced tools
environment-setup(If it is not version 7.2, switch to 7.2)
npm ci
npm run android
or
npm run start then input a in terminal
npm run start:web
基础组件放在src/components/basic下
业务组件放在src/components/business下
componentName
- index.ts // 必须有,用于导出组件,以及导出默认主组件
- demo.tsx // 必须有,使用示例
- index.md // 必须有,组件使用文档
- componentName.tsx // 至少有一个主组件
- type.ts // 如果组件用到比较多或复杂的类型,需要单独定义在type文件中
暂时先直接在app.tsx中调试,同时避免提交对app.tsx的修改以避免冲突,后续再研究更好的调试方案
调试时除了npm run android,同时也要npm run start:web,避免web端的异常
FAQs
## environment
The npm package nativelight receives a total of 2 weekly downloads. As such, nativelight popularity was classified as not popular.
We found that nativelight demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.