
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
@adeira/eslint-runner
Advanced tools
Eslint runner for large projects - faster than Eslint itself. 🤯
yarn add jest @adeira/eslint-runner --dev
This package contains a special runner for Jest to speedup Eslint checks. It executes Eslint in parallel thanks to Jest workers so it's much faster when you have many files with complicated rules. You have to create special Jest config in order to use this runner (.jest-eslint.config.js):
module.exports = {
displayName: 'lint',
rootDir: __dirname,
verbose: false,
reporters: [
// optional but quite nice, give it a try
'@adeira/eslint-runner/reporter',
],
runner: '@adeira/eslint-runner',
testMatch: [
// add whatever files you want to lint
'<rootDir>/src/**/*.js',
'<rootDir>/scripts/**/*.js',
],
};
It is of course possible to run this lint as yet another Jest project (using options.projects configuration). To execute this runner you have to call Jest like this:
{
"scripts": {
"lint": "yarn jest --config=.jest-eslint.config.js"
}
}
It tries to detect files to lint because it's highly inefficient to test all the files everytime. However, you can do so by using --all flag like so: yarn run lint --all.
This Eslint runner not only runs all the lints much faster, but it also performs automatic fixes. Automatic fixes are performed only while developing locally, not during CI. You can disable this behavior even locally by setting CI=true environment variable.
You can also suppress warnings in report by --no-warnings option. Usage of this option is generally discouraged, although it may be handy in certain scenarios - consider migration strategy to adopt a new rule on the legacy project when you get hundreds of reports:
error for given rule in eslintrc file.warn, e.g. by adding /* eslint flowtype/no-weak-types: "warn" */ comment to the top of file or in eslintrc for specific subdirectory where rule is too much broken.--no-warnings option to locate the issue.And it has a nice and helpful output:

FAQs
Eslint runner for large projects - faster than Eslint itself. 🤯
The npm package @adeira/eslint-runner receives a total of 161 weekly downloads. As such, @adeira/eslint-runner popularity was classified as not popular.
We found that @adeira/eslint-runner demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.