Gathering detailed insights and metrics for @dcloudio/uni-stacktracey
Gathering detailed insights and metrics for @dcloudio/uni-stacktracey
A cross-platform framework using Vue.js
Installations
npm install @dcloudio/uni-stacktraceyDeveloper Guide
BETA
Typescript
No
Module System
CommonJS
Node Version
18.20.4
NPM Version
lerna/5.6.2/node@v18.20.4+x64 (linux)
Releases
Unable to fetch releases
Languages
6
JavaScript
TypeScript
Vue
CSS
HTML
SCSS
JavaScript (83.07%)
TypeScript (15.69%)
Vue (0.85%)
CSS (0.35%)
HTML (0.02%)
SCSS (0.02%)
Developer
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
Apache-2.0 License
40,970 Stars
9,490 Commits
3,702 Forks
511 Watchers
37 Branches
50 Contributors
Updated on Jul 16, 2025
Maintainers
10
Package Meta Information
Latest Version
2.0.2-4070520250711001
Package Id
@dcloudio/uni-stacktracey@2.0.2-4070520250711001
Unpacked Size
419.73 kB
Size
111.55 kB
File Count
23
NPM Version
lerna/5.6.2/node@v18.20.4+x64 (linux)
Node Version
18.20.4
Published on
Jul 11, 2025
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dev Dependencies
1
uni-app
简体中文 | English
uni-app 是一个使用 Vue.js 开发小程序、H5、App的统一前端框架。官网地址：https://uniapp.dcloud.io
开发者使用 Vue 语法编写代码，uni-app 框架将其编译到 小程序（微信/支付宝/百度/字节跳动/QQ/快手/钉钉/小红书）、App（iOS/Android）、H5等多个平台，保证其正确运行并达到优秀体验。
uni-app的特点
- 开发者和案例更多：HBuilder装机量800万台，开发者社区月活百万，70多个QQ微信群承载10万人。案例众多，uni统计月活超10亿（详见）
- 性能更高（见评测）
- 更丰富的周边生态，插件市场数千款插件
- 提供比小程序原生开发更好的开发体验、更高的工程化效率
- 跨端抹平度更完善，且各端特色发挥更灵活，可真正实现一套代码多端覆盖，无需各端多头维护升级
- 权威认可：阿里小程序官方工具内置uni-app（详见）、腾讯课堂官方自制uni-app培训视频（详见）
扫码体验
开发一次，编译到14个平台。依次扫描14个二维码，亲自体验最全面的跨平台效果！
注： 某些平台不能提交简单demo，补充了一些其他功能。
快速开始
uni-app支持通过vue-cli命令行、HBuilderX可视化界面两种方式快速创建项目：
- vue-cli命令行方式：不限IDE，适合对node熟悉的开发者，扩展阅读：在vscode中开发uni-app、在 WebStorm 中开发 uni-app
- HBuilderX可视化界面：专用IDE，内置相关环境，开箱即用，开发效率更高。
项目案例
欢迎提交你的应用，uni-app案例征集
需求墙
uni-app计划支持的功能点，会在需求墙上进行展示，征集开发者的投票意见，前往投票。
更新日志
uni-app一直保持高频的更新迭代，详见正式版更新日志、Alpha版更新日志。
论坛
由于DCloud有70多个QQ、微信群，官方已无法维护更多交流群。请开发者到官方论坛交流：https://ask.dcloud.net.cn/explore/ 。论坛提供了比issues更专业的工具服务。
插件市场
uni-app有丰富的插件生态，众多开发者提交了数千款组件、sdk、项目模板，详见：https://ext.dcloud.net.cn/
除了众多三方ui库，官方还提供了uni-ui，在性能和跨端兼容方面有更强的优势。详见：https://ext.dcloud.net.cn/plugin?id=55
现有项目如何迁移到uni-app体系
- 微信小程序转换uni-app指南及转换器：https://ask.dcloud.net.cn/article/35786
- vue h5项目转换uni-app指南：https://ask.dcloud.net.cn/article/36174
- mpvue 项目（组件）迁移指南、示例及资源汇总： https://ask.dcloud.net.cn/article/34945
- wepy转uni-app转换器：https://github.com/zhangdaren/wepy-to-uniapp
常见疑问
-
问：不同端有不同的需求、不同的特色，登录支付也不一样，如何统一？
-
答：差异部分使用条件编译。uni-app提供了灵活强大的条件编译。可以完美处理复用部分和差异部分。真正一套工程源码。当业务升级时，不再需要多端维护。如果多端维护，经常会因为某些端的流量不大，就一直拖延无法让那些用户享受到最新服务。另外登录支付在客户端部分，已经被uni-app统一成一样的api了。
-
问：多端是不是一种妥协，是否会造成性能下降？
-
答：good question。多端且不影响性能，确实很难，但uni-app做到了。在h5端，它的性能、包体积与直接使用vue.js开发一致； 在小程序端，它的性能比大多数开发框架更好，uni-app底层自动处理的setdata差量同步机制，比开发者手动写setdata更好，就像使用vue.js更新界面比手动写js修改dom更高效一样； 在App，uni-app支持webview渲染和原生渲染双引擎，启用原生渲染时，css写法受限，但性能是很接近原生开发的效果的，在当前的手机环境下，千万日活以下的应用在App使用uni-app也不会遇到任何压力。当然也可以在已经做好的原生App中将部分页面改为uni-app实现; 此外，我们会把很多跨端处理放在编译期完成的，这样会减少对运行期的效率影响。
-
问：不做多端，是不是不需要uni-app？
-
答：不是。大量开发者用uni-app只做一个端，详见案例。对于开发者而言，一个优秀工具在手，做什么都不愁。
-
问：uni-app以后会不会变更开源协议，转向收费？
-
答：官方承诺永远不会变更开源协议。无论HBuilderX、uni-app、App，面向中国人永久免费。
更多资料
贡献指南
如果你想参与贡献，请先阅读贡献指南。
No vulnerabilities found.
Reason
30 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Reason
no dangerous workflow patterns detected
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0
Reason
branch protection is not maximal on development and all release branches
Details
- Info: 'allow deletion' disabled on branch 'next'
- Info: 'force pushes' disabled on branch 'next'
- Info: 'branch protection settings apply to administrators' is required to merge on branch 'next'
- Warn: could not determine whether codeowners review is allowed
- Warn: no status checks found to merge onto branch 'next'
- Warn: PRs are not required to make changes on branch 'next'; or we don't have data to detect it.If you think it might be the latter, make sure to run Scorecard with a PAT or use Repo Rules (that are always public) instead of Branch Protection settings
Reason
Found 0/30 approved changesets -- score normalized to 0
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/e2e.yml:1
- Warn: no topLevel permission defined: .github/workflows/size-check.yml:1
- Info: no jobLevel write permissions found
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
binaries present in source code
Details
- Warn: binary detected: packages/uni-cli-shared/lib/preprocessor/preprocessor-macos-arm64.node:1
- Warn: binary detected: packages/uni-cli-shared/lib/preprocessor/preprocessor-macos-x86_64.node:1
- Warn: binary detected: packages/uni-cli-shared/lib/preprocessor/preprocessor-windows-x86_64.node:1
- Warn: binary detected: packages/uni-stacktracey/lib/source-map/lib/mappings.wasm:1
- Warn: binary detected: packages/uni-uts-v1/lib/kotlin/lib/uts-kotlin-compiler-plugin.jar:1
- Warn: binary detected: packages/uts-darwin-arm64/uts.darwin-arm64.node:1
- Warn: binary detected: packages/uts-darwin-x64/uts.darwin-x64.node:1
- Warn: binary detected: packages/uts-linux-x64-gnu/uts.linux-x64-gnu.node:1
- Warn: binary detected: packages/uts-linux-x64-musl/uts.linux-x64-musl.node:1
- Warn: binary detected: packages/uts-win32-ia32-msvc/uts.win32-ia32-msvc.node:1
- Warn: binary detected: packages/uts-win32-x64-msvc/uts.win32-x64-msvc.node:1
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 1 are checked with a SAST tool
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/dcloudio/uni-app/e2e.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/dcloudio/uni-app/e2e.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/dcloudio/uni-app/e2e.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/dcloudio/uni-app/e2e.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/dcloudio/uni-app/e2e.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/size-check.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/dcloudio/uni-app/size-check.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/size-check.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/dcloudio/uni-app/size-check.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/size-check.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/dcloudio/uni-app/size-check.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/size-check.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/dcloudio/uni-app/size-check.yml/next?enable=pin
- Info: 0 out of 4 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 5 third-party GitHubAction dependencies pinned
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
30 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-p2ph-7g93-hw3m
- Warn: Project is vulnerable to: GHSA-wrw9-m778-g6mc
- Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r
- Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
- Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747
- Warn: Project is vulnerable to: GHSA-vjh7-7g9h-fjfh
- Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99
- Warn: Project is vulnerable to: GHSA-w7q9-p3jq-fmhm
- Warn: Project is vulnerable to: GHSA-xvf7-4v9q-58w6
- Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
- Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w
- Warn: Project is vulnerable to: GHSA-h7cp-r72f-jxh6
- Warn: Project is vulnerable to: GHSA-v62p-rq8g-8h59
- Warn: Project is vulnerable to: GHSA-x565-32qp-m3vf
- Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
- Warn: Project is vulnerable to: GHSA-x6fg-f45m-jf5q
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
- Warn: Project is vulnerable to: GHSA-64vr-g452-qvp3
- Warn: Project is vulnerable to: GHSA-9cwx-2883-4wfx
- Warn: Project is vulnerable to: GHSA-vg6x-rcgg-rjx6
- Warn: Project is vulnerable to: GHSA-x574-m823-4x7w
- Warn: Project is vulnerable to: GHSA-4r4m-qw57-chr8
- Warn: Project is vulnerable to: GHSA-xcj6-pq6g-qj4x
- Warn: Project is vulnerable to: GHSA-356w-63v5-8wf4
- Warn: Project is vulnerable to: GHSA-859w-5945-r5v3
Score
2.8
/10
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More