Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@10up/eslint-config
Advanced tools
ESLint shareable config
@10up/eslint-config is a shareable configuration package for eslint built on top of eslint-airbnb-config and modified to meet 10up's own standards.
Install @10up/eslint-config as a development dependency of your project:
npm install @10up/eslint-config --save-dev
The default export contains common rules that are not specific to any framework or environment.
// eslintrc.js
module.exports = {
extends: ['@10up/eslint-config'],
};
Extends @10up/eslint-config
adding specific rules to React.
// eslintrc.js
module.exports = {
extends: ['@10up/eslint-config/react'],
};
Extends @10up/eslint-config/react
adding the custom gutenberg rules from @wordpress/eslint-plugin
.
Note: This is an optional dependency, if you want to use this set of rules you must install @wordpress/eslint-plugin
first.
npm install --save-dev @wordpress/eslint-plugin
// eslintrc.js
module.exports = {
extends: ['@10up/eslint-config/wordpress'],
};
Extends @10up/eslint-config
adding specific rules to Node.js.
// eslintrc.js
module.exports = {
extends: ['@10up/eslint-config/node'],
};
Adds specific rules for the jest
testing framework.
// eslintrc.js
module.exports = {
extends: ['@10up/eslint-config/react', '@10up/eslint-config/jest'],
};
This legacy config contains only rules for ES5. It should be used for projects without babel that are still writing legacy JavaScript code.
// eslintrc.js
module.exports = {
extends: ['@10up/eslint-config/legacy'],
};
In order to use this config, choose the one you want and add this configuration to your package.json
:
{
"eslintConfig": {
"extends": "@10up/eslint-config"
}
}
Or add a .eslintrc.js
file to your project root containing:
module.exports = {
extends: ['@10up/eslint-config'],
};
If you want TypeScript support, make sure to install @typescript-eslint/eslint-plugin
and @typescript-eslint/parser
npm install --save-dev @typescript-eslint/eslint-plugin @typescript-eslint/parser
change the eslint parser to @typescript-eslint/parser
and add the typescript plugin
// eslintrc.js
module.exports = {
parser: '@typescript-eslint/parser',
extends: ['@10up/eslint-config/react'],
plugins: ['@typescript-eslint'],
}
We recommend turning on VSCode settings to automatically run eslint --fix
on save.
"editor.codeActionsOnSave": {
"source.fixAll.eslint": true,
}
This will automagically format your code once you save. You don't need VSCode prettier extension enabled or running on save as eslint will automatically run prettier
for you.
Active: 10up is actively working on this, and we expect to continue work for the foreseeable future including keeping tested up to the most recent version of WordPress. Bug reports, feature requests, questions, and pull requests are welcome.
FAQs
A shareable ESLint configuration
The npm package @10up/eslint-config receives a total of 3,827 weekly downloads. As such, @10up/eslint-config popularity was classified as popular.
We found that @10up/eslint-config demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.