Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@biomejs/wasm-nodejs
Advanced tools
v1.8.3 (2024-06-27)
Fix #3104 by suppressing node warnings when using biome migrate
. Contributed by @SuperchupuDev
Force colors to be off when using the GitHub reporter to properly create annotations in GitHub actions (#3148). Contributed by @Sec-ant
nursery/useDeprecatedReason
rule. Contributed by @vohoanglong0107.useImportExtensions
rule. Contributed by @drdaemosuseConsistentArrayType
and useShorthandArrayType
now ignore Array
in the extends
and implements
clauses. Fix #3247. Contributed by @Conaclospackage.json
. Contributed by @ematipicouseArrowFunction
rule now preserves a trailing comma when there is only a single type parameter in the arrow function and JSX is enabled. Fixes #3292. Contributed by @Sec-antEnhance tailwind sorting lint rule #1274 with variant support.
Every preconfigured variant is assigned a weight
that concurs on establishing the output sorting order.
Since nesting variants on the same utility class is possible, the resulting weight
is the Bitwise XOR of all the variants weight for that class.
Dynamic variants (e.g. has-[.custom-class]
, group-[:checked]
) are also supported and they take the weight
of their base variant name the custom value attached (e.g. has-[.custom-class]
takes has
weight).
Arbitrary variants (e.g. [&nth-child(2)]
) don't have a weight assigned and they are placed after every known variant.
Classes with the same amount of arbitrary variants follow lexicographical order. The class that has the highest number of nested arbitrary variants is placed last.
Screen variants (e.g. sm:
, max-md:
, min-lg:
) are not supported yet.
Contributed by @lutaok
FAQs
WebAssembly bindings to the Biome workspace API
The npm package @biomejs/wasm-nodejs receives a total of 29,643 weekly downloads. As such, @biomejs/wasm-nodejs popularity was classified as popular.
We found that @biomejs/wasm-nodejs demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.