
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
npm i vi-dialog 使用微信开发者工具构建NPM并使用NPM模块
{
"usingComponents": {
"vi-dialog": "vi-dialog"
}
}
| 接口 | 数据类型 | 说明 | 选项 | 默认值 |
|---|---|---|---|---|
| ishide | Boolean | 控制组件dialog显示隐藏 | 必填 | false |
| title | String | dialog组件title | 选填 | 提示 |
| input | Boolean | 是否开启输入会话窗,默认不开启 | 选填 | false |
| confirm | Boolean | 确认会话窗 | 选填 | false |
| alert | Boolean | 警告会话窗 | 选填 | false |
| custom | Boolean | 自定义会话窗按钮 | 选填 | false |
| placeholder | String | input标签的placeholder属性要和组件的input接口配合使用 | 选填 | 请输入内容 |
| value | String | input标签的value属性要和组件的input接口配合使用 | 选填 | '' |
| inputType | String | input标签的type属性要和组件的input接口配合使用 | 选填 | 文本输入框(text) |
| maxlength | Number | input标签的maxlength属性要和组件的input接口配合使用 | 选填 | 140 |
| disabled | Boolean | input标签的disable属性要和组件的input接口配合使用 | 选填 | false |
| confirmType | String | 小程序input组件的confirmType属性要和组件的input接口配合使用 | 选填 | done |
| password | Boolean | input组件的password属性要和组件的input接口配合使用 | 选填 | false |
| event name | description | 返回值数据类型 | 返回值说明 |
|---|---|---|---|
| triggerToCancel | 取消按钮的事件 | String | 按钮的标识:'cancel' |
| triggerToConfirm | 确认按钮的事件 | String, Object | 数据类型为String时是按钮的标识:'confirm',数据类型为Object时,是输入会话窗的event.detail值 |
| triggerToInput | input的输入事件 | Object | 返回用户输入的值 |
| triggerToFocus | input的聚焦事件 | Object | event.detail |
| triggerToBlur | input的失焦事件 | Object | event.detail |
| slot name | description |
|---|---|
| default | 默认插槽,会话窗的提示内容 |
| customButton | 自定义按钮的插槽,注意需要和组件的custom接口配合使用 |
FAQs
微信小程序组件dialog
We found that vi-dialog demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.