
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
使用 Typescript 构建,提供完善的类型定义
支持文档记录,支持 demo 演示
配套完整的测试用例,帮助您提升项目健壮性
一是为了练习掌握 hooks 的使用,二是对一些业务常用的 hooks 进行沉淀。
从 0 ~ 1 手把手搭建一个前端业务 Hooks 库,从产品设计、框架选择、架构设计到最终的编码落地,通过一个完整的产品实现,解决如何提升代码复用的问题。
作为基础包,选择社区内更推崇的pnpm作为包管理工具,原因有:
pnpm安装速度更快,磁盘空间利用率高;pnpm的lock文件适用于多个单一子功能的模块,且能保证每个模块的依赖不耦合;gulp这种流程式的构建工具,能够更清晰的表达构建流程;webpack作为构建产物的声明式接入方式;unpkg进行在线 dist 文件访问:https://unpkg.com/sd-hooks;dist文件,如<script src="https://unpkg.com/sd-hooks@0.1.0/dist/sd-hooks.js"></script>;npm i sd-hooks使用 dumi 静态站点解决方案 来生成说明文档
jest功能全面,资料丰富,能够很好地支撑原子化集合的工具函数;
FAQs
sd-Hooks
The npm package sd-hooks receives a total of 7 weekly downloads. As such, sd-hooks popularity was classified as not popular.
We found that sd-hooks demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.