
Security News
GitHub Actions Checkout Now Blocks Risky pull_request_target Checkouts
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.
@deppon/deppon-eslint-config
Advanced tools
npm install @deppon/deppon-eslint-config -D
在你项目的根目录添加 .eslintrc 文件,添加以下配置
{
"extends": "@deppon/deppon-eslint-config"
}
也可以在添加其他配置去覆盖 @deppon/deppon-eslint-config 的某些默认配置,详见 Shareable Configs
如果想要配合编辑器完成保存即自动修复,可以在根目录的 .vscode 文件夹的 settings.json 文件中配置以下代码
{
"typescript.tsdk": "node_modules/typescript/lib",
"eslint.validate": ["javascript", "javascriptreact", "typescript", "typescriptreact", "vue"],
"eslint.options": {
"extensions": [".js", ".jsx", ".ts", ".tsx", ".vue"]
},
"editor.codeActionsOnSave": {
"source.fixAll.eslint": true
},
"editor.formatOnSave": true,
"[javascript]": {
"editor.formatOnSave": false
},
"[javascriptreact]": {
"editor.formatOnSave": false
},
"[typescript]": {
"editor.formatOnSave": false
},
"[typescriptreact]": {
"editor.formatOnSave": false
},
"[vue]": {
"editor.formatOnSave": false
}
}
如果想配置整个项目的校验或格式化,添加以下脚本代码到 package.json 中
"scripts": {
"lint": "eslint . --ext js,ts,tsx,vue",
"format": "prettier --write **/*.{js,ts,tsx,vue} && eslint . --ext js,ts,tsx,vue --fix"
}
FAQs
ESLint shared config for Vue 3 + TypeScript projects
The npm package @deppon/deppon-eslint-config receives a total of 185 weekly downloads. As such, @deppon/deppon-eslint-config popularity was classified as not popular.
We found that @deppon/deppon-eslint-config demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.