
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
@codedre/eslint-config-codedre
Advanced tools
These are my settings for ESLint and Prettier that I use in my personal projects. It is based off eslint-config-wesbos and eslint-config-hzdg.
$ npx install-peerdeps --dev @codedre/eslint-config-codedre
Create .eslintrc
file in the root of your project and add the following:
{
"extends": [
"@codedre/codedre"
]
}
Configure eslint to extend the codedre
TypeScript config:
.eslintrc
{ "extends": ["@codedre/codedre", "@codedre/codedre/typescript"] }
Add the necessary TypesScript peer dependencies:
yarn add --dev @typescript-eslint/eslint-plugin @typescript-eslint/parser typescript
TypeScript has its own configuration file that is used by the compiler
and other tools, like editor integrations. This project ships with
a tsconfig.json
that you can extend in your project:
tsconfig.json
{ "extends": "@codedre/eslint-config-codedre/tsconfig" }
NOTE for VSCode users:
The [vscode-eslint] extension does not currently lint
.ts
or.tsx
files by default. To get eslint to run on your TypeScript files, configure the extension in VSCode project (or global) settings:
.vscode/settings.json
{ "eslint.validate": [ "javascript", "javascriptreact", "typescript", "typescriptreact" ] }
Here are the instructions for VS Code:
Code/File
→ Preferences
→ Settings
. It's easier to enter these settings while editing the settings.json
file, so click the {}
icon in the top right corner: // These are all my auto-save configs
"editor.formatOnSave": true,
// turn it off for JS and JSX, we will do this via eslint
"[javascript]": {
"editor.formatOnSave": false
},
"[javascriptreact]": {
"editor.formatOnSave": false
},
// tell the ESLint plugin to run on save
"eslint.autoFixOnSave": true,
// Optional BUT IMPORTANT: If you have the prettier extension enabled for other languages like CSS and HTML, turn it off for JS since we are doing it through Eslint already
FAQs
ESLint and Prettier config setup
We found that @codedre/eslint-config-codedre demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.