
Research
/Security News
Shai Hulud Strikes Again (v2)
Another wave of Shai-Hulud campaign has hit npm with more than 500 packages and 700+ versions affected.
@condorhero/stylelint-config-scss
Advanced tools
My stylelint config SCSS presets
Note:
@stylelint/postcss-css-in-jspackage may be abandoned Deprecate packageďźI will follow it in real time.
pnpm add -D eslint @condorhero/stylelint-config-scss
.stylelintrc{
"extends": "@condorhero/stylelint-config-scss"
}
You can use a
.stylelintignorefile to ignore specific files, Alternatively, you can add an ignoreFiles property within your configuration object.It is recommended to use the CLI command to specify the format file suffix, For example:stylelint src/**/*.{css,html,md}).
For example:
{
"scripts": {
"stylelint": "stylelint **/*.{css,html,md,scss}",
"stylelint:fix": "stylelint **/*.{css,html,md,scss} --fix"
}
}
Create .vscode/settings.json
{
"css.validate": false,
"less.validate": false,
"scss.validate": false,
"editor.formatOnSave": false,
"editor.codeActionsOnSave": {
"source.fixAll.stylelint": true
},
"files.autoSaveDelay": 500,
}
source: https://github.com/stylelint/vscode-stylelint/issues/35
Hey there! We are really excited that you are interested in contributing. This is a general contribution guide. Before submitting your contribution, please make sure to take a moment and read through the following guide:
Keeping dependencies up-to-date is one of the important aspects to keep projects alive and getting latest bug fixes on time. We recommend to update dependencies in weekly or bi-weekly intervals.
We use taze to update the dependencies manually most of the time. As deps updating bots like Dependabot or Renovate could be a bit annoying when you have a lot projects.
With taze, you can run taze major -Ir to check and select the versions to update interactive. -I stands for --interactive, -r stands for --recursive for monorepo.
I usually use:
taze -r major && taze -w
After bumpping, we install them, runing build and test to verify nothing breaks before pushing to main.

# add a monorepoďźpackage.json adds a new field workspaces, which you can also add manually
npm init -w ./packages/typescript
# Run "test" script on all packages
npm run test --workspaces
# Tip - this also works:
npm run test -ws
# To run a command for a specific package, add the --workspace (singular) flag:
# Runs "test" only on package-a
npm run test --workspace package-a
# Tip - this also works:
npm run test -w package-a
# add a file pnpm-workspace.yaml
# for example:
packages:
- 'packages/*'
# Run "test" script on all packages
pnpm run test -r
# Tip - this also works:
pnpm run test --recursive
# To run a command for a specific package, add the --workspace and --filter flag:
# Runs "test" only on package-a
npm run test --recursive --filter="package-a"
# Tip - this also works:
npm run test -r -F="package-a"
Note: pnpm -w is --workspace-root Run as if pnpm was started in the root of the workspace instead of the current working directory.
We use Conventional Commits for commit messages, which allows the changelog to be auto-generated based on the commits. Please read the guide through if you aren't familiar with it already.
EditorConfig helps maintain consistent coding styles for multiple developers working on the same project across various editors and IDEs.
VS Code need download Plugin - EditorConfig for VS Code.
FAQs
My Stylelint SCSS config presets
We found that @condorhero/stylelint-config-scss demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Another wave of Shai-Hulud campaign has hit npm with more than 500 packages and 700+ versions affected.

Product
Add real-time Socket webhook events to your workflows to automatically receive software supply chain alert changes in real time.

Security News
ENISA has become a CVE Program Root, giving the EU a central authority for coordinating vulnerability reporting, disclosure, and cross-border response.