
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
sungrow-utils
Advanced tools
增加AES加解密工具
npm run build-rollup
修改package.json的version字段
version字段x.y.z
小功能增加 优化 增加z
大功能优化 但兼容 增加y
大功能优化 不兼容 增加x
原则上迭代到一定版本可调整
npm publish
1. 普通js库
命名 构造函数和类 使用大写驼峰
普通对象实例 使用小写驼峰
2. 公共vue文件
命名 ‘*External.vue’ 使用大写驼峰
同时新建js导出该vue文件
3. 单个单词的请使用大写
4. 所有文件名称需与默认导出字段相同 才可以实现按需引入
5. 库所依赖的工具 混入 需以utils install mixin命名 打包会自动忽略
引用的第三方库一般添加到package.json时已经被排除在外
若有意外需到build/rollup.config.base.js external方法中调整
库中相互依赖 需要进行后编译 需到build/rollup.config.base.js noPackageList数组中添加
FAQs
utils for sungrow
We found that sungrow-utils demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.