
Security News
PodRocket Podcast: Inside the Recent npm Supply Chain Attacks
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
@esri/eslint-plugin-calcite-components
Advanced tools
ESLint rules specific to @esri/calcite-components
development.
Install the following deps in your Lumina project:
npm i @esri/eslint-plugin-calcite-components --save-dev
Add or update the .eslintrc.json
configuration file:
{
"parserOptions": {
"project": "./tsconfig.json"
},
"extends": ["plugin:@esri/calcite-components/recommended"]
}
Add a new lint
script to package.json
:
{
"scripts": {
"lint": "eslint src/**/*{.ts,.tsx}"
}
}
Then you can run the linter:
npm run lint
This rule helps prevent usage of specific events and allows suggesting alternatives.
This rule ensures that calls to document.createElement()
use string literals to avoid dynamic tag creation to enhance plugin compatibility.
This rule catches boolean props that are initialized in a way that does not conform to the HTML5 spec.
We welcome contributions to this project. See CONTRIBUTING.md for an overview of contribution guidelines.
COPYRIGHT © 2025 Esri
All rights reserved under the copyright laws of the United States and applicable international laws, treaties, and conventions.
This material is licensed for use under the Esri Master License Agreement (MLA), and is bound by the terms of that agreement. You may redistribute and use this code without modification, provided you adhere to the terms of the MLA and include this copyright notice.
See use restrictions at http://www.esri.com/legal/pdfs/mla_e204_e300/english
For additional information, refer to Calcite's licensing and contact: Environmental Systems Research Institute, Inc. Attn: Contracts and Legal Services Department 380 New York Street Redlands, California, USA 92373 USA
email: contracts@esri.com
FAQs
ESLint rules for @esri/calcite-components
We found that @esri/eslint-plugin-calcite-components demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 45 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.