
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
vtuzx-core
Advanced tools
基于mongoDB, log4js 提供http访问, 文件处理(excel, pdf, fs相关), 图像处理, 数据校验等核心功能
传配置文件, 需要设置入口全局路径 global.__home,
相关配置文件放在conf文件夹内,
包含系统配置文件, log4js配置文件, banner配置
调用根目录的index.js的setup方法进行配置,
参数是配置文件名, 默认configure
通过设置环境变量[VTUZX_ENV]区分多环境, 默认dev
标准设置[__home/conf/configure.js]
运行环境[__home/conf/configure_dev.js]
运行环境设置 > 标准设置
例如:
标准配置:
{
a: 1,
b: 2,
c: { c1: 3, c2: 4 }
}
运行环境配置:
{
b: 22,
c: { c2: 44, c3: 55 }
}
则最终使用环境为:
{
a: 1,
b: 22,
c: { c1: 3, c2: 44, c3: 55 }
}
具体设置内容参照nodejs/log4js,
配置文件默认文件名问log4js.js, 可通过系统配置[system.logConf]进行设置,
通过设置环境变量[VTUZX_ENV]区分多环境, 默认dev
标准设置[__home/conf/log4js.js]
运行环境[__home/conf/log4js_dev.js]
运行环境设置 > 标准设置
默认读取conf下的banner.txt
可通过系统配置[system.absoluteBannerPath]指定绝对路径,
可通过系统配置[system.banner]指定conf下的文件名(扩展名固定为.txt)
系统配置内指定mongo模块,
{
mongo: {
url: '数据库访问路径',
database: '默认访问数据库',
scan: '扫描dao路径, 默认[ /src/vtuzx/dao ]',
scanRegex: '扫描过滤规则, 默认[.*Dao\.js]',
except: '配置过程中排除的的文件名内容, [默认[ "Dao" ]',
dao: '手动加载的dao',
options: '数据库连接参数, 具体参照nodejs/mongodb',
sessionSetting: '事务初始设置, 具体参照nodejs/mongodb',
transactionSetting: '事务启动设置, 具体参照nodejs/mongodb'
logLevelWhenStart: '启动时的输出日志级别'
}
}
Dao Class的构造方法, 有两个参数(database, name)\
database可以指定改Dao所属数据库, 默认为系统配置内的database,
name可以指定对应的collection名, 默认为文件名去除系统配置内的except
FAQs
core of vtuzx
We found that vtuzx-core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.