
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Vue3 UI Components Library
注:该仓库主要记录从 0 搭建一个组件库的方法,包括组件文档的编写
# github
git clone https://github.com/vangleer/vangle.git
# gitee
git clone https://gitee.com/vangleer/vangle.git
pnpm install
pnpm 版本是 6.32.6
# 本地开发环境
pnpm docs:dev
# 打包组件库
pnpm build
# 发布到 npm,tips: 需要将npm的registry切换到原始的(https://registry.npmjs.org/)并提前登录
pnpm release
# 工具命令: 创建要开发的组件,此命令回创建组件的基本文件和添加文档
pnpm gen ComponentName
# 工具命令: 删除组件,会删除与该组件相关的文件和文档
pnpm del ComponentName
npm install vangle
如果你对打包后的文件大小不是很在乎,那么使用完整导入会更方便。
// main.ts
import { createApp } from 'vue'
import 'vangle/dist/style.css'
import Vangle from 'vangle'
import App from './App.vue'
createApp(App).use(Vangle).mount('#app')
FAQs
A Component Library for Vue 3
The npm package vangleee receives a total of 0 weekly downloads. As such, vangleee popularity was classified as not popular.
We found that vangleee demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.