Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@applint/projectlint
Advanced tools
提供项目级别检测和修复 Node API,目前包括 Codemod 检查和修复、项目依赖检查(冗余包和风险包)、项目 bundle 体积大小检查,对齐 @applint/applint 功能。
npm i @applint/projectlint --save-dev
选项:
string
, 运行 Codemod 的项目根路径boolean
, 是否进行 Codemod dry-run,默认值是 true
string[]
, jscodeshift 配置,默认值是 []
返回值:
result: TransformResult[]
interface TransformResult {
// 规则名称
transform: string;
title: string;
title_en: string;
message: string;
message_en: string;
// 0: off 1: warn 2: error
severity: number;
tags: string[];
dry: boolean;
docs: string;
output: string;
npm_deprecate?: string;
}
例子:
import ProjectLint from '@applint/projectlint';
const cwd = '/workspace/demo';
const transforms = {
'plugin-rax-component-to-component': 'error',
'lint-config-to-iceworks-spec': 'warn',
};
const projectLint = new ProjectLint({ cwd, transforms });
const result = projectLint.scan();
console.log('run transforms result', result);
plugin-rax-component-to-component
更新 build-plugin-rax-component
到 build-plugin-component
。文档
lint-config-to-iceworks-spec
遵循阿里巴巴前端规范并使用 @iceworks/spec
最佳实践。文档
lint-config-to-applint-spec
遵循阿里巴巴大淘宝前端规范并使用 @applint/spec
最佳实践。文档
FAQs
提供项目级别检测和修复 Node API,目前包括 Codemod 检查和修复、依赖检查和 bundle 体积检查
The npm package @applint/projectlint receives a total of 15 weekly downloads. As such, @applint/projectlint popularity was classified as not popular.
We found that @applint/projectlint demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.