
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
react-up-props
Advanced tools
npm install react-up-props
import { Button } from 'react-up-props'
import 'react-up-props/dist/index/index.css'
新增(Layout 、Menu 、Pagination 、TreeSelect 、Upload 、Avatar 、Badge 、Card 、Collapse 、Descriptions 、Empty 、Spin )
删除(-)
以上参考源的api
删除ckeditor的能力,增加:前端生成excel的能力、发布订阅模式、24个方法封装、提醒框
新增(Global 、Methodset 、PortTable 、store )
删除(CKEditor )
新增依赖(crypto-es 、exceljs 、file-saver )
删除依赖(@ckeditor/ckeditor5-build-classic 、@ckeditor/ckeditor5-react )
import { Global } from 'react-up-props';
// function
Global.prompt("sure","成功");
Global.prompt("error","失败");
Global.prompt("warn","警告");
Global.prompt("ruin");// 销毁
import { Methodset } from 'react-up-props/lib';
const {encrypt, decrypt} = Methodset;
import { store } from 'react-up-props/lib';
store.on("key",(value)=>{ console.log("订阅") })
store.emit("key","发布");
// 组件销毁则删除订阅,否则可能造成内存泄漏
store.delete("key");
react@17.0.0
react-dom@17.0.0
antd@4.24.15
@ant-design/icons@5.2.6
braft-editor@2.3.9
react-custom-scrollbars@4.2.1
react-codemirror2@7.2.1
codemirror@5.65.11
react-draggable@4.4.6
crypto-es
exceljs
file-saver
FAQs
基于蚂蚁金服前端团队开发的UI库做二封,另外收录一些好用的库如:拖动功能、滚动条、富文本框等
We found that react-up-props demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.