
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
# 全局安装
npm i ykfe-cli -g
yk -V
yk -h
yk new XXX(模板名)
yktest new XXX(模板名)
# 根据命令行提示完成初始化
yk new example
所有模板需存于git仓库
http://192.168.28.114:8080/yk_njfe/team-lib中cli目录下
vue-cli文件夹package.json文件,需改名成_package.json(编译器会对package.json严格校验)yk-cli.config.js文件,具体配置参数需见下方ejs模板引擎规则,将模板文件进行修改,可参考http://192.168.28.114:8080/yk_njfe/team-lib/cli/exampleyktest new vue-cli 测试其流程vue-cli文件夹拷贝至远程仓库http://192.168.28.114:8080/yk_njfe/team-lib/cli/yk-cli.config.js参数说明可参考
http://192.168.28.114:8080/yk_njfe/team-lib/cli/example/yk-cli.config.js的写法
welcome [string]
当使用命令行工具初始化时候,给予用户初始化文案
questions [array]
配置问题列表,具体参考 https://www.npmjs.com/package/inquirer
rules [array]
默认项目中所有文件都会编译生成,如果你想针对不同场景来配置文件生成逻辑,可使用此配置 如:
{
test: function (questions) {
return !questions.needReadme
},
exclude: ['readme.md']
},
当test函数返回true时,会排除exclude中指定的文件列表。其中exclude的文件路径使用的是glob模式https://www.npmjs.com/package/glob
templateSuffix [array]
当你的模板文件采用的是一些自定义格式时候,你需要在这里配置后缀名,以便编译器可以识别这些文件。如:tpl
ignore [array]
如果你想将一些文件排除在编译器之外,可以在这里配置,比如默认配置:['.svn', '.git']
如果您有更多疑问请咨询: ykcl-fe.
FAQs
We found that ykfe-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.