
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@botonic/dx
Advanced tools
This package simplifies the configuration of all CI tasks for projects which use botonic.
npm install -D @botonic/dx
sample-config
folder to the root of your project
(Merge this package.json's scripts into your project ones)sample-config
just import the configuration maintained within this project.
To adapt them to your project needs, you just need to patch the specific options after importing the baseline.
See instructions on each of these files.Instructions here because it cannot contain comments
For a project to use our proposed eslint configuration, you'll need to:
lint
from sample-config/package.json to your package.json.npm run lint
will now perform a quick check which will also fix some of the detected issues.npm run lint-ci
will perform a slower check which detects more issues. It will not fix any issue,
since it's designed to be integrated into your CI pipeline.Due to an eslint_d issue, --fix --quiet
does not autofix issues.
Please check the eslint user guide for adapting this configuration to your needs.
In case your project uses typescript (or contains .d.ts files), add the scripts starting with
build
from sample-config/package.json to your package.json
npm run build
will transpile into JS.npm run build-ci
will validate your project source code and tests using your tsconfig.test.json configurationDepends on @botonic/eslint-config. As per the official documentation, the eslint plugins are configured there as peer dependencies.
Due to a npm bug, npm version
interaction with git
(check clean stage, commit and create tag) is broken. Hence, sample-config manually checks that
there are no modifications in git files.
FAQs
Continuous integration for botonic packages
We found that @botonic/dx demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.