
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
运营平台是一套基于Vue全家桶(Vue2.x + Vue-router2.x + Vuex)+ Thinkphp的前后端分离框架。 脚手架构建也可以通过vue官方的vue-cli脚手架工具构建
### 开发依赖
* vue <https://vuefe.cn/v2/guide/>
* element-ui@1.1.3 <http://element.eleme.io/1.1/#/zh-CN/component/installation>
* axios <https://github.com/mzabriskie/axios>
* fontawesome <http://fontawesome.io/icons/>
* js-cookie <https://github.com/js-cookie/js-cookie>
* lockr <https://github.com/tsironis/lockr>
* lodash <http://lodashjs.com/docs/>
* moment <http://momentjs.cn/>
### 数据交互
数据交互通过axios以及RESTful架构来实现
用户校验通过登录返回的auth_key放在header
值得注意的一点是:跨域的情况下,会有预请求OPTION的情况
附上接口文档:<http://rap.taobao.org/workspace/myWorkspace.do?projectId=15385#128405>
### 前端部署
部署前准备 1.安装node.js 前端部分是基于node.js上运行的,所以必须先安装node.js,版本要求为6.9.0以上(推荐安装官方推荐版本),下载地址:https://nodejs.org/zh-cn/ 2.程序运行之前需搭建好Server端 vueThink的后端搭建请参考这里(https://github.com/honraytech/VueThink/tree/master/php),此处不再多述。 完成以上两个步骤之后,我们进入到frontEnd这个目录,然后按顺序执行以下两行代码就可以愉快地玩耍了。 npm install npm run dev
注意:前端服务启动,默认会占用8080端口,所以在启动前端服务之前,请确认8080端口没有被占用。 如果想替换前端默认端口,可修改config/index.js里面的dev对象的port参数,但不建议这么做。 另外接口请求本地服务的端口是80端口,如果配置后端服务的时候启动的不是80端口,可在build/webpack.base.conf.js里修改DEV_HOST(开发环境请求地址)。
FAQs
yypt made by vue2.0 elment2.0
We found that yypt demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.