
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@dsb-norge/eslint-config-dsb-vue3
Advanced tools
ESLint standard config for Vue 3 (JavaScript) projects using Flat config
This package provides a Flat-config ESLint setup for Vue 3 JavaScript projects. It layers Vue's recommended rules, accessibility rules, and DSB stylistic choices.
Peer dependencies (install in your project):
Install:
npm i -D @dsb-norge/eslint-config-dsb-vue3 eslint eslint-plugin-vue eslint-plugin-vuejs-accessibility @stylistic/eslint-plugin
Create eslint.config.mjs
in your project:
import dsbVue3 from '@dsb-norge/eslint-config-dsb-vue3'
export default [
...dsbVue3,
// Optional: add your project-specific overrides here
]
Run:
npx eslint .
@dsb-norge/eslint-config-dsb-vue3-ts
.eslint.config.mjs
.This ESLint configuration comes with some fundamental assumptions:
Despite these, you can freely override, extend, or unset rules in your own flat config.
Remove packages no longer needed by this baseline if they were previously installed in your project:
npm uninstall -D @rushstack/eslint-patch eslint-config-standard eslint-plugin-import eslint-plugin-n eslint-plugin-promise
Ensure you’re on ESLint 9 and compatible peers:
npm i -D eslint@latest eslint-plugin-vue@^10 eslint-plugin-vuejs-accessibility@^2.4 @stylistic/eslint-plugin@^5
Update to the simple flat-config scripts:
{
"scripts": {
"lint": "eslint",
"lint:fix": "eslint --fix"
}
}
Move from .eslintrc*
to eslint.config.mjs
and spread this config.
From (old):
// .eslintrc.js
module.exports = {
root: true,
extends: [
'@dsb-norge/dsb-vue3'
]
}
To (new):
// eslint.config.mjs
import dsbVue3 from '@dsb-norge/eslint-config-dsb-vue3'
export default [
...dsbVue3,
{
// your project-specific overrides here
rules: {
// e.g. 'no-console': 'off'
}
}
]
If your project relies on additional rule sets, add them explicitly with their Flat presets (see each plugin’s docs):
npm i -D eslint-plugin-import eslint-plugin-n eslint-plugin-promise
// eslint.config.mjs (excerpt)
import dsbVue3 from '@dsb-norge/eslint-config-dsb-vue3'
import pluginImport from 'eslint-plugin-import'
import pluginN from 'eslint-plugin-n'
import pluginPromise from 'eslint-plugin-promise'
export default [
...dsbVue3,
// The exact flat preset keys may vary by version; consult plugin docs.
// Examples:
...(pluginImport.flatConfigs?.recommended ?? []),
...(pluginN.configs?.['flat/recommended'] ?? []),
...(pluginPromise.configs?.['flat/recommended'] ?? []),
]
Add Cypress rules to Cypress files only. Note the spread and scoping with files
.
// eslint.config.mjs
import dsbVue3 from '@dsb-norge/eslint-config-dsb-vue3'
import pluginCypress from 'eslint-plugin-cypress/flat'
export default [
...dsbVue3,
{
name: 'Cypress',
...pluginCypress.configs.recommended,
files: [
'**/__tests__/*.{cy,spec}.{js,jsx}',
'cypress/e2e/**/*.{cy,spec}.{js,jsx}',
'cypress/support/**/*.{js,jsx}'
],
rules: {
// your Cypress-specific overrides here
}
}
]
FAQs
ESLint standard config for Vue 3 (JavaScript) projects using Flat config
The npm package @dsb-norge/eslint-config-dsb-vue3 receives a total of 9 weekly downloads. As such, @dsb-norge/eslint-config-dsb-vue3 popularity was classified as not popular.
We found that @dsb-norge/eslint-config-dsb-vue3 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.