
Security News
/Research
Fake Corepack Site Distributes Infostealer and Proxyware to Developers
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.
Sact是一个仿照vue和react造的轮子,从零实现了vue的大部分功能,也引入了一些关于react概念,主要是为了解决我在写静态页面时复杂功能实现,顺便学习关于mvvm框架的核心原理。
源码可以直接克隆查看,大部分都都做的有注释
您是否经常要在静态网站内开发一些特殊的功能模块,比如说添加一个新的搜索功能?一个新的弹窗功能?或者是一个新的页面? 不想使用Jquery,原生JS,来进行命令式开发,再为此引入Vue或者React?这可是个静态页面,我要引入多少东西?还要打包多少包? 那么Sact可能就是你所需要的,它专门针对静态页面的复杂功能开发,只需要引入一个不到8kb的sact组件包(gzip)你就可以在网页内直接开发响应式组件。 不需要webpack来打包,不需要引入一堆无关的转义器,开箱即用。
Prue JavaScript !只有一个包!
//引入dist下的sact.js即可使用sact的所有功能
<script src="./dist/sact.js"></script>
您可以在您的页面内新建一个盒子容器,就像vue那样
<div id="root"></div>
Sact支持两种方式声明一个新的应用
//对象声明式
let app = new Sact({
ele:"#root",
template:"<div>{{msg}}</div>",
data:{msg:"hello world"}
})
//链式声明式
let app =
Sact.link()
.ele("#root")
.tempalte("<div>{{msg}}</div>")
.data({msg:"hello world"})
.do
这只是两种不同的声明方式,所创建的app是完全一样的,对象式更好理解,而声明式更容易帮助我们将组件的每个功能分离,选择你喜欢的方式来进行开发吧。
有任何关于Sact的使用问题,或者bug都可以在Issues内提出。
FAQs
this is a MVVM JavaScript framework that use Proxy to reactive data, like Vue3
The npm package sact receives a total of 1 weekly downloads. As such, sact popularity was classified as not popular.
We found that sact demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

Research
/Security News
A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.