
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
tav-ui 是基于 Vue 3 + Typescript + Vite 技术开发的前端 Vue 组件库。该项目采用pnpm+monorepo进行包管理,使用gulp控制打包流程,rollup进行打包。
环境依赖 node16 pnpm7
文件中用到的自定义类型必须手动复制粘贴过去
组件 prop 提出来放在同层的 types 中导入使用
通过 pnpm plop:cmp 创建组件
每个组件必须只有一个导出,可以把之前的复合组件拆开,参考 basic-*
每次迁移组件结束后打一次包查看 dist 下是否生成 type 文件夹
utils/hooks/components 中如果用到 utils/hooks/components 的情况,不能直接通过入口导入,要找到确定的文件再导入,避免循环依赖
组件必须有 name,格式:TaXx 驼峰命名
script setup 添加 name 的方式:
defineOptions({
name: 'TaDropDown',
})
禁止在 vue sfc 中出现 script lang="tsx" 的写法,rollup 解析不完整可能会报错。建议:只有用到了 template 或 style 才写 Vue SFC,否则直接写 ts、tsx 文件即可
refactor(build): element-plus kevin fixed up =>
需要先
等待 github action 自动发布即可,发布进度在 github 仓库中的 actions 下查看
"tav-ui": "file:/Users/i7eo/Documents/Company/XA-Castianta/tav-ui/dist/tav-ui"filter => filterFormConfig,使用前请先查看 vxegrid api 和 tablepro 下的 typestav-ui v8.0.0+ 改动: 全局注入属性,需要添加 appId、userInfo。每个项目都需要加,appId、userInfo 与 components 属性同层级。
表格列配置使用方法:
import { useRouter } from 'vue-router'
import { getTableProId } from 'tav-ui'
手动生成唯一 id,传递给 tablepro,如下:
const router = useRouter()
const tableProId = ref < string > ''
tableProId.value = getTableProId(router, 'all')
然后在 tablepro 的 customactionconfig 中设置 column 为 true 即可。
需要注意的是:
//错误示例
columns: [
{
field: 'group_1',
title: '分组1',
children: [
{
field: 'group_1_1',
title: '分组1-1',
customRender: () => {
return 'sssss'
},
},
{
field: 'group_1_2',
title: '分组1-2',
},
],
},
]
//正确示例
columns: [
{
field: 'group1',
title: '分组1',
children: [
{
field: 'group11',
title: '分组1-1',
customRender: () => {
return 'sssss'
},
},
{
field: 'group12',
title: '分组1-2',
},
],
},
]
FAQs
Tav UI
We found that tav-ui demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.