
Security News
crates.io Ships Security Tab and Tightens Publishing Controls
crates.io adds a Security tab backed by RustSec advisories and narrows trusted publishing paths to reduce common CI publishing risks.
tdp-public-sdk
Advanced tools
> 该项目为 TDP 部门前端 SDK 管理和开发仓库,采用 pnpm(参考:https://www.pnpm.cn/) 搭建 monorepo(参考:https://zhuanlan.zhihu.com/p/513171061) 工程管理模块,它不再分多个 git 仓库,而是在一个 git 仓库里面管理多个项目,每个项目有自己的 package.json 文件,有自己的 node_modules 目录。开发阶段使用 Esbuild(参考:https://esbuild.github.io/) 打包应用,
该项目为 TDP 部门前端 SDK 管理和开发仓库,采用 pnpm(参考:https://www.pnpm.cn/) 搭建 monorepo(参考:https://zhuanlan.zhihu.com/p/513171061) 工程管理模块,它不再分多个 git 仓库,而是在一个 git 仓库里面管理多个项目,每个项目有自己的 package.json 文件,有自己的 node_modules 目录。开发阶段使用 Esbuild(参考:https://esbuild.github.io/) 打包应用,保证开发响应速度,生产阶段使用 Rollup(参考:https://www.rollupjs.com/) 打包应用,生成多种文件格式,满足不同平台使用。
git clone https://gitlab.xpaas.lenovo.com/tdp/data-modeler/tdp-web-platform/tdp-public-sdk.git
该项目使用 pnpm 软件包管理器(请先安装 pnpm)
npm install -g pnpm
如果是根目录,会安装根目录依赖和所有 packages 依赖
cd tdp-public-sdk
pnpm install
pnpm add xxx -w
指定命令空间 @test/lib,指定为 @test/app 添加依赖
$ pnpm i @test/lib --filter @test/app
--filter为制定 package 添加依赖
pnpm add lodash --filter @test/lib
开发环境使用 esbuild 打包
pnpm dev
"dev": "node scripts/dev.js 具体打包项目名称 -f esm",
将 packages 所有项目打包
pnpm build
请见 scripts/build.js 注释内容
git hooks 工具 husky,规范提交格式。(详情请查看 commitlint.config.js) git commit 阶段会经过多种 lint 检查,pretty 代码格式化检查,注意你提交的代码是否符合 lint 规则。(详情请查看 package.json)
针对 rollup 打包
"buildOptions": {
"name": "TDPWebMonitorSDK",
"formats": [
"esm-browser",
"esm-bundler",
"cjs",
"global"
],
"sourcemap": false,
"env": "development"
}
参数说明
| 名称 | 作用 |
|---|---|
| name | 打包后对外暴露方法 |
| formats | 支持打包的文件格式 |
| sourcemap | 支持 sourcemap |
| env | 环境 |
FAQs
> 该项目为 TDP 部门前端 SDK 管理和开发仓库,采用 pnpm(参考:https://www.pnpm.cn/) 搭建 monorepo(参考:https://zhuanlan.zhihu.com/p/513171061) 工程管理模块,它不再分多个 git 仓库,而是在一个 git 仓库里面管理多个项目,每个项目有自己的 package.json 文件,有自己的 node_modules 目录。开发阶段使用 Esbuild(参考:https://esbuild.github.io/) 打包应用,
The npm package tdp-public-sdk receives a total of 0 weekly downloads. As such, tdp-public-sdk popularity was classified as not popular.
We found that tdp-public-sdk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
crates.io adds a Security tab backed by RustSec advisories and narrows trusted publishing paths to reduce common CI publishing risks.

Research
/Security News
A Chrome extension claiming to hide Amazon ads was found secretly hijacking affiliate links, replacing creators’ tags with its own without user consent.

Security News
A surge of AI-generated vulnerability reports has pushed open source maintainers to rethink bug bounties and tighten security disclosure processes.