Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
@20i/mrm-preset
Advanced tools
mrm preset to set up eslint, prettier, lint-staged, husky, and typescript
mrm preset to set up nvm, eslint, prettier, lint-staged, husky, and typescript
Setup all the things!
npx mrm all --preset @20i/mrm-preset
# or for yarn berry
yarn dlx mrm all --preset @20i/mrm-preset
Each of these can be set up individually. To see all available tasks, run
npx mrm --preset @20i/mrm-preset
npx mrm nvm --preset @20i/mrm-preset
Every project should have a .nvmrc
file. Currently this defaults to 16, but you can change it to whatever you need.
nvm can be installed by following their installation instructions
npx mrm eslint --preset @20i/mrm-preset
The @20i/eslint-config will be installed with prettier and typescript support by default. See the package for more details.
If React or React Native are found as dependencies, additional eslint packages will be installed. This command can be run again after adding react if needed.
npx mrm lint-staged --preset @20i/mrm-preset
This also sets up husky to run as a pre-commit hook. The default command is to use a precommit
npm script, but that can be adjusted in .husky/pre-commit
and in your package.json
.
npx mrm gitignore --preset @20i/mrm-preset
Configured with default values for a node project and yarn berry.
Any default preset can be run with
npx mrm <PRESET>
Currently, this just runs the mrm preset for typescript. PRs are welcome to update this :D
Will only run if a readme is not already present.
Will only run if a license is not already present.
This is a nifty config to help your editor have better default values. For more options, check out editorconfig docs.
FAQs
mrm preset to set up eslint, prettier, lint-staged, husky, and typescript
We found that @20i/mrm-preset demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 12 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.