npmpackage.info

Gathering detailed insights and metrics for @aleen42/layui-src

@aleen42/layui-src - 2.3.0 | npmpackage.info

@aleen42/layui-src

一套遵循原生态开发模式的 Web UI 组件库，采用自身轻量级模块化规范，易上手，可以更简单快速地构建网页界面。

2.3.0

30,260

MIT

JavaScript

10.49 MB

1,590 5.5

Installations

npm install @aleen42/layui-src

Developer Guide

BETA

Typescript

No

Module System

CommonJS

Node Version

16.12.0

NPM Version

8.1.0 Score

79.4

Supply Chain

99.2

Quality

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

2

Total

897

Closed

307

Merged

588

Issues

Open

59

Total

1,333

Closed

1,274

Releases

156

v2.11.4

Updated on Jun 22, 2025

v2.11.3

Updated on Jun 18, 2025

v2.11.2

Updated on May 15, 2025

v2.11.1

Updated on May 06, 2025

v2.11.0

Updated on Apr 21, 2025

v2.11.0-rc.5

Updated on Apr 20, 2025

View All 156 releases

Languages

JavaScript

CSS

JavaScript (83.48%)

CSS (16.52%)

Developer

sentsin

Download Statistics

Total Downloads

1,590

Last Day

Last Week

Last Month

Last Year

909

GitHub Statistics

MIT License

30,260 Stars

2,488 Commits

7,420 Forks

937 Watchers

5 Branches

62 Contributors

Updated on Jul 02, 2025

Maintainers

View All 62 Contributors

Package Meta Information

Latest Version

2.3.0

Package Id

@aleen42/layui-src@2.3.0

Unpacked Size

10.49 MB

Size

3.01 MB

File Count

952

NPM Version

8.1.0

Node Version

16.12.0

Total Downloads

Cumulative downloads

Total Downloads

1,590

Last Day

50%

Compared to previous day

Last Week

29.4%

Compared to previous week

Last Month

-32.2%

Compared to previous month

Last Year

106.1%

909

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Classic modular front-end UI framework

layui 是一款采用自身模块规范编写的情怀型前端UI框架，遵循原生HTML/CSS/JS的书写与组织形式，门槛极低，拿来即用。其外在极简，却又不失饱满的内在，体积轻盈，组件丰盈，从核心代码到API的每一处细节都经过精心雕琢，非常适合界面的快速开发。layui 首个版本发布于2016年金秋，她区别于那些基于MVVM底层的UI框架，却并非逆道而行，而是信奉返璞归真之道。准确地说，她更多是为服务端程序员量身定做，你无需涉足各种前端工具的复杂配置，只需面对浏览器本身，让一切你所需要的元素与交互，从这里信手拈来。

返璞归真

layui 定义为“经典模块化”，并非是自吹她自身有多优秀，而是有意避开当下JS社区的主流方案，试图以最简单的方式去诠释高效！她的所谓经典，是在于对返璞归真的执念，她以当前浏览器普通认可的方式去组织模块！我们认为，这恰是符合当下国内绝大多数程序员从旧时代过渡到未来新标准的最佳指引。所以 layui 本身也并不是完全遵循于AMD时代，准确地说，她试图建立自己的模式，所以你会看到：

1//layui模块的定义
2layui.define([mods], function(exports){
3  
4  //……
5  
6  exports('mod', api);
7});  
8 
9//layui模块的使用
10layui.use(['mod1', 'mod2'], function(args){
11  var mod = layui.mod1;
12  
13  //……
14  
15});

没错，她具备AMD的影子，又并非受限于commonjs的那些条条框框，layui 认为这种轻量的组织方式，比WebPack更符合绝大多数场景。所以她坚持采用经典模块化，也正是能让人避开工具的复杂配置，回归简单，安静高效地撸一会原生态的HTML、CSS、JavaScript。

但是 layui 又并非是Requirejs那样的模块加载器，而是一款UI解决方案，她与Bootstrap最大的不同恰恰在于她糅合了自身对经典模块化的理解。

快速上手

获得 layui 后，将其完整地部署到你的项目目录（或静态资源服务器），你只需要引入下述两个文件：

./layui/css/layui.css
./layui/layui.js //提示：如果是采用非模块化方式（最下面有讲解），此处可换成：./layui/layui.all.js

不用去管其它任何文件。因为他们（比如各模块）都是在最终使用的时候才会自动加载。这是一个基本的入门页面：

1<!DOCTYPE html>
2<html>
3<head>
4  <meta charset="utf-8">
5  <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
6  <title>开始使用layui</title>
7  <link rel="stylesheet" href="../layui/css/layui.css">
8</head>
9<body>
10 
11<!-- 你的HTML代码 -->
12 
13<script src="../layui/layui.js"></script>
14<script>
15//一般直接写在一个js文件中
16layui.use(['layer', 'form'], function(){
17  var layer = layui.layer
18  ,form = layui.form;
19  
20  layer.msg('Hello World');
21});
22</script> 
23</body>
24</html>

如果你想采用非模块化方式（即所有模块一次性加载，尽管我们并不推荐你这么做），你也可以按照下面的方式使用：

1<!DOCTYPE html>
2<html>
3<head>
4  <meta charset="utf-8">
5  <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
6  <title>非模块化方式使用layui</title>
7  <link rel="stylesheet" href="../layui/css/layui.css">
8</head>
9<body>
10 
11<!-- 你的HTML代码 -->
12 
13<script src="../layui/layui.all.js"></script>
14<script>
15//由于模块都一次性加载，因此不用执行 layui.use() 来加载对应模块，直接使用即可：
16;!function(){
17  var layer = layui.layer
18  ,form = layui.form;
19  
20  layer.msg('Hello World');
21}();
22</script> 
23</body>
24</html>

阅读文档

从现在开始，尽情地拥抱 layui 吧！但愿她能成为你长远的开发伴侣，化作你方寸屏幕前的亿万字节！

10

Maintained

Determines if the project is "actively maintained".

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

License

Determines if the project has defined a license.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Packaging

Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.

6

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

4

Security-Policy

Determines if the project has published a security policy.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-close-require.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/layui/layui/issue-close-require.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-close-require.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/layui/layui/issue-close-require.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-close-require.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/layui/layui/issue-close-require.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-closed.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/layui/layui/issue-closed.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-labeled.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/layui/layui/issue-labeled.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-labeled.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/layui/layui/issue-labeled.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-labeled.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/layui/layui/issue-labeled.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-labeled.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/layui/layui/issue-labeled.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-labeled.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/layui/layui/issue-labeled.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-opened.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/layui/layui/issue-opened.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-preview.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/layui/layui/pr-preview.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-preview.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/layui/layui/pr-preview.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-npm.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/layui/layui/release-npm.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-npm.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/layui/layui/release-npm.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/layui/layui/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/layui/layui/release.yml/main?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/pr-preview.yml:19
Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 9 third-party GitHubAction dependencies pinned
Info: 0 out of 1 npmCommand dependencies pinned

0

Signed-Releases

Determines if the project cryptographically signs release artifacts.

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

Score

5.5

/10

Last Scanned on 2025-06-23

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

@aleen42/layui-src

Installations

Developer Guide

No

CommonJS

16.12.0

8.1.0

Score

Pull Requests

2

897

307

588

Issues

59

1,333

1,274

Releases

Languages

Developer

Download Statistics

GitHub Statistics

Maintainers

Package Meta Information

Total Downloads

1,590

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dev Dependencies

返璞归真

快速上手

阅读文档

相关

10

10

10

10

10

10

6

4

0

0

0

0

0

0

5.5

/10