
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@fictivekin/eslint-config-fk
Advanced tools
Fictive Kin sharable eslint configuration
Run the following in your project directory to install:
yarn add eslint @fictivekin/eslint-config-fk --dev
In your package.json file, add:
"eslintConfig": {
"extends": "@fictivekin/eslint-config-fk"
}
Use the dev
branch for on-going development. Merge PRs against dev
.
master
branch is for the latest production release.
We need to be careful with changes to our lint config, as our linting rules directly affect project workflows, possibly breaking builds when new errors are introduced. Every so often, we will evaluate the changes to dev
and cut a new release. Changes that introduce new errors are considered a breaking change and will constitute a new major version. So, we want to batch those changes together in bigger releases, rather that smaller incremental releases.
Add the --quiet
option to suppress warnings and show only errors.
# yarn
yarn lint:js --quiet
# npm
npm run lint:js -- --quiet
Writing JSDocs for functions can feel like a chore, but we've eased on some rules to make it easier. Parameter descriptions and return descriptions are not required. If your variable names are self-documenting, you can omit descriptions and document just the types.
/**
* @param {Object} post
* @param {String} attr
* @return {String}
*/
function getTitle(post, attr) {
return post[attr]; // contrived example, but you get the idea
}
You may encounter this error:
error 'key' is defined but never used no-unused-vars
The linter is likely catching an unused argument variable within a destructured Array. Prefix the argument with an underscore _
to make the linter ignore it. See no-unused-vars destructuredArrayIgnorePattern.
Object.entries(items, (_key, value) => {})
v3.0.0
simple-import-sort/imports
. #6browser
environment. #9node
environmentes2020
environment. Enables optional?.chaining?.operator
.no-unused-vars
args after-used. #2no-cond-assign
. Previously disabled in eslint-config-google
'quote-props': ['error', 'as-needed']
. #12indent
ignoredNodes TemplateLiteralyarn.lock
eslint-config-google
. Inlined rules. #8babel-eslint
. #3, #7FAQs
Fictive Kin sharable eslint configuration
The npm package @fictivekin/eslint-config-fk receives a total of 106 weekly downloads. As such, @fictivekin/eslint-config-fk popularity was classified as not popular.
We found that @fictivekin/eslint-config-fk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.