Security News
Supply Chain Attack Detected in Solana's web3.js Library
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
@build-chores/eslint-config-lint
Advanced tools
@build-chores/eslint-config-lint
Linting JS projects is complicated.
Lint your JavaScript code. This config is based on Airbnb's base lint configuration and includes support for Prettier, the Flow type checker and promises.
Install the @build-chores/eslint-config-lint
package into your project:
yarn install --dev @build-chores/eslint-config-lint
Create a .eslintrc
file containing the following snippet. See the example .eslintrc
for a template.
{
"extends": ["@build-chores/lint"]
}
To use flow as well place a .flowconfig
and .flowcoverage
configuration file. See the example flowconfig
and the example .flowcoverage
for templates.
Note that even if flow
isn't use an empty .flowconfig
file has to be created.
This package installs flow-typed
to install flow type definitions. To make it work in this setup the flow-libdefs
wrapper script is provided. It takes the same arguments as flow-typed
.
The following command installs type definitions for your dependencies.
yarn flow-libdefs install
Edit your package.json
to include the following scripts. See the example package.json
for a template.
{
"scripts": {
"fix": "yarn lint --fix",
"flow:coverage": "yarn flow-coverage-report --config ./.flowcoverage",
"flow:gen": "gen-flow-files --out-dir dist src",
"flow:libdefs": "yarn flow-libdefs update",
"lint": "eslint src/**/*.js**"
}
}
Types are checked during the regular linting. If you want to run Flow separated, you can call the flow
command directly with yarn flow
.
See the rules file for details of the ESLint configuration.
You are ready to lint your JavaScript code.
Check out our contributing.md to get started.
FAQs
Linting JS projects is complicated.
The npm package @build-chores/eslint-config-lint receives a total of 2 weekly downloads. As such, @build-chores/eslint-config-lint popularity was classified as not popular.
We found that @build-chores/eslint-config-lint demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.