Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
@bjervis/eslint-plugin-redundant-stack
Advanced tools
Warn on <Stack> elements that only have a single child
Designed to work with projects using braid-design-system, this plugin detects when a Stack element is redundant.
Braid Stacks are used to manage the vertical spacing between elements. If you have only a single element inside a Stack (or none), there's nothing for it to be spaced from, and so you don't need to include a Stack.
Usually this comes about because you did need a Stack originally, but refactored away the other child elements, not realising there was only one left.
// ok
<Stack space="medium">
<Text>First item</Text>
<Text>Second item</Text>
</Stack>
// also ok, because it will generate several children
<Stack space="large">
{jobs.map((job) => (
<JobsCard job={job} />
))}
</Stack>
// error - single child
<Stack space="medium">
<Text>Single item</Text>
</Stack>
// error - empty
<Stack space="medium"></Stack>
pnpm add -D @bjervis/eslint-plugin-redundant-stack
Then in your eslint config
plugins: ['@bjervis/redundant-stack'],
rules: {
'@bjervis/redundant-stack/no-redundant-stack': 2,
},
If you're using Braid, you're probably also using sku, so:
// sku.config.js
module.exports = {
...,
dangerouslySetESLintConfig: (skuConfig) => ({
...skuConfig,
plugins: ['@bjervis/redundant-stack'],
rules: {
'@bjervis/redundant-stack/no-redundant-stack': 2,
},
}),
}
FAQs
Warn on <Stack> elements that only have a single child
The npm package @bjervis/eslint-plugin-redundant-stack receives a total of 118 weekly downloads. As such, @bjervis/eslint-plugin-redundant-stack popularity was classified as not popular.
We found that @bjervis/eslint-plugin-redundant-stack demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.