Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@bulb/eslint-config-bulb
Advanced tools
A shared ESLint config for TypeScript codebases at Bulb.
This config extends the following existing configs, in this order of precedence:
If your project is not using React, the React rules mostly won't have any impact.
If your project is not using Typescript+Prettier, update your project to use Typescript+Prettier immediately.
You can refer to index.ts for the full list of rules.
To install:
yarn add --dev eslint@^6 @bulb/eslint-config-bulb
Then add the following to .eslintrc.json
in the root of the directory you want to lint:
{
"extends": ["@bulb/eslint-config-bulb", "@bulb/eslint-config-bulb/jest"]
}
If you're using mocha for testing, use the following instead:
{
"extends": ["@bulb/eslint-config-bulb", "@bulb/eslint-config-bulb/mocha"]
}
The Jest config assumes your test files are using the extension .test.tsx?
, mocha assumes .spec.ts
.
Different projects have different needs. You can override rules in your .eslintrc.json
. If you find yourself disabling the same rules in multiple projects, consider updating this config instead.
TSLint is being deprecated in favor of ESLint.
package.json
Add the following script to the scripts
section of your package.json
:
{
// ... other package.json stuff
"scripts": {
// ... other scripts
"lint": "eslint --cache 'src/**/*.{ts,tsx,js,jsx}'"
}
}
You may need to adjust the folders and file extensions based on your project.
After getting ESLint set up locally, you probably want to:
FAQs
ESLint rules for Bulb packages
The npm package @bulb/eslint-config-bulb receives a total of 67 weekly downloads. As such, @bulb/eslint-config-bulb popularity was classified as not popular.
We found that @bulb/eslint-config-bulb demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 68 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.