Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@andybarron/eslint-config
Advanced tools
This is a strict and very opinionated ESLint preset for my various JavaScript projects.
npm i -E -D @andybarron/eslint-config
@andybarron/eslint-config
to the extends
section of your ESLint
configuration file..eslintrc.json
){
"extends": "@andybarron/eslint-config"
}
.eslintrc.yaml
)NOTE: The quotes are required due to the @
sign at the beginning of the
scoped package name.
extends: '@andybarron/eslint-config'
npm run generate
- Generate an empty list of all non-deprecated ESLint
rules. This overwrites the file lib/rules.js
, so be careful!npm test
- Ensure that all ESLint rules exist in the preset and that
all rules in the preset are valid and not deprecated.npm run lint
- Run this linter preset on its own source code (i.e. the lib
and scripts
directories). So meta!npm run format
- Same as lint
, but attempt to fix lint errors as well.FAQs
Andy's personal ESLint preferences
We found that @andybarron/eslint-config demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.