
Security News
The Nightmare Before Deployment
Season’s greetings from Socket, and here’s to a calm end of year: clean dependencies, boring pipelines, no surprises.
@blueprint-modernized/tslint-config
Advanced tools
TSLint configuration for @blueprint-modernized packages
@blueprint-modernized/eslint-pluginTSLint is deprecated, and as such Blueprint is transitioning to ESLint. Blueprint is now using ESLint in its own repository, and as such this package will be removed in a future major version.
Blueprint is a React UI toolkit for the web.
This package contains configuration for TSLint (the TypeScript linter) and a handful of new rules specifically for use when developing against Blueprint libraries.
Key features:
@blueprint-modernized components.yarn add @blueprint-modernized/tslint-config tslint
Simply extend this package in your tslint.json to use the default rules configuration. This configuration includes Blueprint-specific rules which enforce semantics particular to usage with @blueprint-modernized packages.
tslint.json
{
"extends": "@blueprint-modernized/tslint-config"
}
To enable the Blueprint-specific rules only without the full TSLint config, extend the blueprint-rules config inside the package:
tslint.json
{
"extends": [
+ "@blueprint-modernized/tslint-config/blueprint-rules"
]
}
⭐️ VS Code: Enable the tslint.autoFixOnSave option to fix all fixable failures every time you save. Most importantly, this will automatically apply the Prettier formatting fixes!
blueprint-classes-constantsEnforce usage of Classes constants over namespaced string literals.
Each @blueprint-modernized package exports a Classes object that contains constants for every CSS class defined by the package. While the values of the constants may change between releases, the names of the constants will remain more stable.
{
"rules": {
"blueprint-classes-constants": true
}
}
-const element = <div className="pt-navbar" />;
+const element = <div className={Classes.NAVBAR} />;
blueprint-icon-componentsEnforce usage of JSX Icon components over IconName string literals (or vice-versa) in icon JSX props. Note that this rule only supports hardcoded values in the icon prop; it does not handle expressions or conditionals.
A fixer is available for this rule that will convert between string literals and named Icon components. Note that the implementation is naive and may require intervention, such as to import a component or fix an invalid name.
Named icon components (TickIcon, GraphIcon, etc) can be imported from the @blueprint-modernized/icons package.
This rule is disabled in the blueprint-rules config as it is most useful to ensure that the @blueprint-modernized/icons package can be tree-shaken (an opt-in process which requires using components and never IconName literals).
{
"rules": {
// default uses "component"
"blueprint-icon-components": true,
// expanded syntax
"blueprint-icon-components": {
"options": ["component" | "literal"] // choose one
}
}
}
"component"
-<Button icon="tick" />
+<Button icon={<TickIcon />} />
"literal"
-<Button icon={<GraphIcon />} />
+<Button icon="graph" />
FAQs
TSLint configuration for @blueprint-modernized packages
We found that @blueprint-modernized/tslint-config demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Season’s greetings from Socket, and here’s to a calm end of year: clean dependencies, boring pipelines, no surprises.

Research
/Security News
Impostor NuGet package Tracer.Fody.NLog typosquats Tracer.Fody and its author, using homoglyph tricks, and exfiltrates Stratis wallet JSON/passwords to a Russian IP address.

Security News
Deno 2.6 introduces deno audit with a new --socket flag that plugs directly into Socket to bring supply chain security checks into the Deno CLI.