
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
npm i vi-address 使用微信开发者工具构建NPM并勾选使用NPM模块
打开小程序页面的json配置.
"usingComponents": {
"vi-address": "/vi-address"
}
WXML结构
<view class="font14" bindtap='selectAddress'>点击选择城市: {{address}}</view>
<vi-address is-hide="{{isHide}}" bindhide="selectAddress" bindaddresschange="addressChange"></vi-address>
js逻辑
Page({
data: {
address: '',
isHide: false
},
selectAddress(e) {
this.setData({
isHide: !this.data.isHide
})
},
addressChange({ detail }) {
this.setData({
address: detail.detail.map(item => item.name).join('-')
})
}
})
| 接口 | 数据类型 | 说明 | 选项 | 默认值 |
|---|---|---|---|---|
| isHide | Boolean | 控制组件的显示与隐藏, false 隐藏, true 显示 | 必填 | false |
| areaHide | Boolean | 是否显示区/县, false 显示, true 隐藏 | 选填 | false |
| 事件方法 | 事件说明 | detail 返回值 |
|---|---|---|
| cancel | 组件的取消按钮或者是点击的遮罩层 | 无返回值 |
| confirm | 组件的确认按钮 | 返回选择的城市 |
| hide | 组件隐藏, cancel 与 confirm 都会触发该事件 | 返回值为触发的事件源, 如:取消按钮触发的事件, 则返回值为 cancel |
| addresschange | 省市区选择事件 | 只要有选择便会触发该事件, 组件初始化时会默认触发一次, 返回值为数组集合 |
FAQs
We found that vi-address demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.