Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
@cashstar/cstar-stylelint
Advanced tools
If you want to create a Gulp task, there is an annotated example gulp.js file in this repo for reference (from the auditor app).
These rules are set up to run on your code before it compiles. If you run this on compiled code, you will see formatting errors.
Don't lint your 3rd party libraries. This linter is meant for use on code written internally at CashStar only.
Be mindful of your file structure so you can point the linter to the correct place to ignore 3rd party libraries, compiled code, etc.
You can check out the .stylelintrc.json in this repo for the current set of rules and cross-reference them to the official Stylelint rules page.
We are closely following our current CSS Style Guide for these rules.
FAQs
CashStar CSS Linting Rules for stylelint
The npm package @cashstar/cstar-stylelint receives a total of 1 weekly downloads. As such, @cashstar/cstar-stylelint popularity was classified as not popular.
We found that @cashstar/cstar-stylelint demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.