
Security News
Open VSX Unblocks Extension IDs Used in Malware Campaign
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.
@dirstack/kodeks
Advanced tools
Shared linter configurations for TypeScript projects.
Kodeks provides reusable, opinionated configurations for maintaining consistent code quality across TypeScript projects.
bun add -d @dirstack/kodeks oxlint
Create a .oxlintrc.json file in your project root:
{
"extends": ["./node_modules/@dirstack/kodeks/configs/oxlint-base.json"]
}
For Next.js projects, use the Next.js preset:
{
"extends": ["./node_modules/@dirstack/kodeks/configs/oxlint-next.json"]
}
For TanStack projects, use the TanStack preset:
{
"extends": ["./node_modules/@dirstack/kodeks/configs/oxlint-tanstack.json"]
}
bun add -d @dirstack/kodeks oxfmt
Since oxfmt does not support configuration inheritance, you have two options:
Option 1: Reference via CLI flag
Add to your package.json scripts:
{
"scripts": {
"format": "oxfmt --config ./node_modules/@dirstack/kodeks/configs/oxfmt.json --write ."
}
}
Option 2: Copy configuration locally
cp ./node_modules/@dirstack/kodeks/configs/oxfmt.json ./.oxfmtrc.json
bun add -d @dirstack/kodeks @commitlint/cli @commitlint/config-conventional
Create a commitlint.json file in your project root:
{
"extends": ["./node_modules/@dirstack/kodeks/configs/commitlint.json"]
}
bun add -d @dirstack/kodeks semantic-release conventional-changelog-conventionalcommits
Create a release.json file in your project root:
{
"extends": "@dirstack/kodeks/semantic-release"
}
A dry-run variant is also available for CI validation:
{
"extends": "@dirstack/kodeks/semantic-release-dry-run"
}
bun add -d @dirstack/kodeks lefthook
Create a lefthook.json file in your project root and extend the hooks you need:
{
"extends": [
"node_modules/@dirstack/kodeks/configs/lefthook-oxlint.json",
"node_modules/@dirstack/kodeks/configs/lefthook-oxfmt.json",
"node_modules/@dirstack/kodeks/configs/lefthook-commitlint.json"
]
}
Available hooks:
lefthook-oxlint.json — Lints and fixes staged files with oxlint (pre-commit)lefthook-oxfmt.json — Formats staged files with oxfmt (pre-commit)lefthook-commitlint.json — Validates commit messages (commit-msg)lefthook-typescript.json — Type checks with tsc (pre-commit)This package includes agent skills for code formatting, testing, and commit conventions.
Available skills:
formatting - Code formatting rules not handled by auto-formatters (arrow functions, exports, types, naming, comments, JSX)testing - Best practices, structure, coverage categories, and formatting conventions for writing testscommits - Conventional commit types, scopes, and message formatting guidelinesdependencies - Safely upgrade project dependencies to their latest versions across workspacesdhh - DHH-style code review for TypeScript/React - direct, opinionated, allergic to over-engineeringInstall all skills using skills.sh:
npx skills add dirstack/kodeks
Or install individual skills:
npx skills add dirstack/kodeks --skill formatting
npx skills add dirstack/kodeks --skill testing
npx skills add dirstack/kodeks --skill commits
FAQs
Shared linter configurations for TypeScript projects.
The npm package @dirstack/kodeks receives a total of 30 weekly downloads. As such, @dirstack/kodeks popularity was classified as not popular.
We found that @dirstack/kodeks demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.