
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
广推科技 quickapp cli工具库 & 公共页面及组件库
rt-qa-cli
// 按照template创建的项目已安装该依赖,如未安装,执行如下命令
npm i -S rt-qa-cli
// 确保已进入当前项目目录下
// 该操作会删除当前项目src目录下公共页面目录,并将依赖库中对应的文件夹复制到对应目录下
// 如果项目内未安装该依赖并且无自定义更新命令,执行如下命令
qa-cli cover
// 如果项目内已安装该依赖并且已自定义更新命令,执行如下命令
npm run update
// 作类似如下引入,在模版中使用即可
<import name="rt-ad" src="rt-qa-cli/src/components/ad/native-ad"></import>
<template>
<div>
<rt-ad/>
</div>
</template>
//可忽略该命令,github新建项目时直接使用template即可
//执行如下命令
qa-cli init [项目名称]
sudo chown -R $(whoami) $(npm config get prefix)/{lib/node_modules,bin,share}
FAQs
We found that rt-qa-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.