Gathering detailed insights and metrics for @dcloudio/uni-stacktracey
Installations
npm install @dcloudio/uni-stacktraceyDeveloper Guide
BETA
Typescript
No
Module System
CommonJS
Node Version
18.20.4
NPM Version
lerna/5.6.2/node@v18.20.4+x64 (linux)
Releases
Unable to fetch releases
Contributors
42
Languages
6
JavaScript
TypeScript
Vue
CSS
HTML
SCSS
JavaScript (83.7%)
TypeScript (15.21%)
Vue (0.73%)
CSS (0.31%)
HTML (0.02%)
SCSS (0.02%)
Developer
Download Statistics
Total Downloads
520,404
Last Day
94
Last Week
1,537
Last Month
14,925
Last Year
242,417
GitHub Statistics
40,360 Stars
8,263 Commits
3,653 Forks
515 Watching
29 Branches
42 Contributors
Bundle Size
29.63 kB
Minified
9.28 kB
Minified + Gzipped
Maintainers
10
Package Meta Information
Latest Version
2.0.2-4040520250103001
Package Id
@dcloudio/uni-stacktracey@2.0.2-4040520250103001
Unpacked Size
419.73 kB
Size
111.55 kB
File Count
23
NPM Version
lerna/5.6.2/node@v18.20.4+x64 (linux)
Node Version
18.20.4
Publised On
03 Jan 2025
Total Downloads
Cumulative downloads
Total Downloads
520,404
Last day
-82.3%
94
Compared to previous day
Last week
-59.2%
1,537
Compared to previous week
Last month
9.2%
14,925
Compared to previous month
Last year
6.6%
242,417
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dev Dependencies
1
Versions
uni-app
简体中文 | English
uni-app 是一个使用 Vue.js 开发小程序、H5、App的统一前端框架。官网地址：https://uniapp.dcloud.io
开发者使用 Vue 语法编写代码，uni-app 框架将其编译到 小程序（微信/支付宝/百度/字节跳动/QQ/快手/钉钉/小红书）、App（iOS/Android）、H5等多个平台，保证其正确运行并达到优秀体验。
uni-app的特点
- 开发者和案例更多：HBuilder装机量800万台，开发者社区月活百万，70多个QQ微信群承载10万人。案例众多，uni统计月活超10亿（详见）
- 性能更高（见评测）
- 更丰富的周边生态，插件市场数千款插件
- 提供比小程序原生开发更好的开发体验、更高的工程化效率
- 跨端抹平度更完善，且各端特色发挥更灵活，可真正实现一套代码多端覆盖，无需各端多头维护升级
- 权威认可：阿里小程序官方工具内置uni-app（详见）、腾讯课堂官方自制uni-app培训视频（详见）
扫码体验
开发一次，编译到14个平台。依次扫描14个二维码，亲自体验最全面的跨平台效果！
注： 某些平台不能提交简单demo，补充了一些其他功能。
快速开始
uni-app支持通过vue-cli命令行、HBuilderX可视化界面两种方式快速创建项目：
- vue-cli命令行方式：不限IDE，适合对node熟悉的开发者，扩展阅读：在vscode中开发uni-app、在 WebStorm 中开发 uni-app
- HBuilderX可视化界面：专用IDE，内置相关环境，开箱即用，开发效率更高。
项目案例
欢迎提交你的应用，uni-app案例征集
需求墙
uni-app计划支持的功能点，会在需求墙上进行展示，征集开发者的投票意见，前往投票。
更新日志
uni-app一直保持高频的更新迭代，详见正式版更新日志、Alpha版更新日志。
论坛
由于DCloud有70多个QQ、微信群，官方已无法维护更多交流群。请开发者到官方论坛交流：https://ask.dcloud.net.cn/explore/ 。论坛提供了比issues更专业的工具服务。
插件市场
uni-app有丰富的插件生态，众多开发者提交了数千款组件、sdk、项目模板，详见：https://ext.dcloud.net.cn/
除了众多三方ui库，官方还提供了uni-ui，在性能和跨端兼容方面有更强的优势。详见：https://ext.dcloud.net.cn/plugin?id=55
现有项目如何迁移到uni-app体系
- 微信小程序转换uni-app指南及转换器：https://ask.dcloud.net.cn/article/35786
- vue h5项目转换uni-app指南：https://ask.dcloud.net.cn/article/36174
- mpvue 项目（组件）迁移指南、示例及资源汇总： https://ask.dcloud.net.cn/article/34945
- wepy转uni-app转换器：https://github.com/zhangdaren/wepy-to-uniapp
常见疑问
-
问：不同端有不同的需求、不同的特色，登录支付也不一样，如何统一？
-
答：差异部分使用条件编译。uni-app提供了灵活强大的条件编译。可以完美处理复用部分和差异部分。真正一套工程源码。当业务升级时，不再需要多端维护。如果多端维护，经常会因为某些端的流量不大，就一直拖延无法让那些用户享受到最新服务。另外登录支付在客户端部分，已经被uni-app统一成一样的api了。
-
问：多端是不是一种妥协，是否会造成性能下降？
-
答：good question。多端且不影响性能，确实很难，但uni-app做到了。在h5端，它的性能、包体积与直接使用vue.js开发一致； 在小程序端，它的性能比大多数开发框架更好，uni-app底层自动处理的setdata差量同步机制，比开发者手动写setdata更好，就像使用vue.js更新界面比手动写js修改dom更高效一样； 在App，uni-app支持webview渲染和原生渲染双引擎，启用原生渲染时，css写法受限，但性能是很接近原生开发的效果的，在当前的手机环境下，千万日活以下的应用在App使用uni-app也不会遇到任何压力。当然也可以在已经做好的原生App中将部分页面改为uni-app实现; 此外，我们会把很多跨端处理放在编译期完成的，这样会减少对运行期的效率影响。
-
问：不做多端，是不是不需要uni-app？
-
答：不是。大量开发者用uni-app只做一个端，详见案例。对于开发者而言，一个优秀工具在手，做什么都不愁。
-
问：uni-app以后会不会变更开源协议，转向收费？
-
答：官方承诺永远不会变更开源协议。无论HBuilderX、uni-app、App，面向中国人永久免费。
更多资料
贡献指南
如果你想参与贡献，请先阅读贡献指南。
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0
Reason
branch protection is not maximal on development and all release branches
Details
- Info: 'allow deletion' disabled on branch 'next'
- Info: 'force pushes' disabled on branch 'next'
- Info: 'branch protection settings apply to administrators' is required to merge on branch 'next'
- Warn: could not determine whether codeowners review is allowed
- Warn: no status checks found to merge onto branch 'next'
- Warn: PRs are not required to make changes on branch 'next'; or we don't have data to detect it.If you think it might be the latter, make sure to run Scorecard with a PAT or use Repo Rules (that are always public) instead of Branch Protection settings
Reason
binaries present in source code
Details
- Warn: binary detected: packages/uni-stacktracey/lib/source-map/lib/mappings.wasm:1
- Warn: binary detected: packages/uni-uts-v1/lib/kotlin/lib/uts-kotlin-compiler-plugin.jar:1
- Warn: binary detected: packages/uts-darwin-arm64/uts.darwin-arm64.node:1
- Warn: binary detected: packages/uts-darwin-x64/uts.darwin-x64.node:1
- Warn: binary detected: packages/uts-linux-x64-gnu/uts.linux-x64-gnu.node:1
- Warn: binary detected: packages/uts-linux-x64-musl/uts.linux-x64-musl.node:1
- Warn: binary detected: packages/uts-win32-ia32-msvc/uts.win32-ia32-msvc.node:1
- Warn: binary detected: packages/uts-win32-x64-msvc/uts.win32-x64-msvc.node:1
Reason
Found 0/30 approved changesets -- score normalized to 0
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/e2e.yml:1
- Warn: no topLevel permission defined: .github/workflows/size-check.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
no SAST tool detected
Details
- Warn: no pull requests merged into dev branch
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/dcloudio/uni-app/e2e.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/dcloudio/uni-app/e2e.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/dcloudio/uni-app/e2e.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/dcloudio/uni-app/e2e.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/dcloudio/uni-app/e2e.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/size-check.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/dcloudio/uni-app/size-check.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/size-check.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/dcloudio/uni-app/size-check.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/size-check.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/dcloudio/uni-app/size-check.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/size-check.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/dcloudio/uni-app/size-check.yml/next?enable=pin
- Info: 0 out of 4 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 5 third-party GitHubAction dependencies pinned
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
18 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-wrw9-m778-g6mc
- Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r
- Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747
- Warn: Project is vulnerable to: GHSA-w7q9-p3jq-fmhm
- Warn: Project is vulnerable to: GHSA-xvf7-4v9q-58w6
- Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
- Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w
- Warn: Project is vulnerable to: GHSA-x565-32qp-m3vf
- Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
- Warn: Project is vulnerable to: GHSA-x6fg-f45m-jf5q
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
- Warn: Project is vulnerable to: GHSA-64vr-g452-qvp3
- Warn: Project is vulnerable to: GHSA-9cwx-2883-4wfx
- Warn: Project is vulnerable to: GHSA-vg6x-rcgg-rjx6
Score
3
/10
Last Scanned on 2025-01-27
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More