
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
vuejs League of Legends project
项目源码 在线地址 (该地址目标暂时有问题,请直接下载项目运行)
Version: 2.0 更新内容:
重写了vuex部分 添加了周免英雄
由 vue-cli + muse-ui 构建,使用 axios 进行数据的请求,使用 vuex 进行状态管理,图片懒加载: vue-lazyload,轮播组件:vue-awesome-swiper,上拉加载: vue-infinite-scroll。
# install dependencies
npm install
# serve with hot reload at localhost:8888
npm run dev
# build for production with minification
npm run build
# build for production and view the bundle analyzer report
npm run build --report
在github上看了那么多的vue项目,自己的看过其中的部分,当然肯定也仿过,可是一直没坚持下去。本项目是自己第一个完整的开源小项目,然后会有很多的不足,也是自己第一次使用vuex,希望大家可以多提意见,我也会一直更新这个项目,喜欢的朋友可以star一下。最后感谢带玩游戏平台提供的API!
FAQs
League of Legends Data project
We found that vue-lol demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.