
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@fimbul/mithotyn
Advanced tools
TypeScript LanguageService Plugin that provides real-time in-editor linting while you type.
Make sure to also read the full documentation of all available modules.
npm install --save-dev @fimbul/wotan @fimbul/mithotyn
# or
yarn add -D @fimbul/wotan @fimbul/mithotyn
To enable this plugin, you need to add @fimbul/mithotyn
as plugin in your tsconfig.json
. For example:
{
"compilerOptions": {
"plugins": [
{ "name": "@fimbul/mithotyn" }
],
// your existing compilerOptions
"strict": true,
}
}
Make sure you have @fimbul/wotan
installed in the project directory or a parent directory.
.fimbullinter.yaml
Like the CLI this plugin uses your configurations from a file named .fimbullinter.yaml
. The main difference is that it doesn't only look for this file in the current directory but also in all parent directories.
This is necessary because there is likely only one .fimbullinter.yaml
in the root of your workspace, but multiple TypeScript projects may exist in subdirectories.
The following options are used if present in that file. Note that all paths and modules are resolved relative to the directory containing this configuration file.
modules
: loads the specified plugin modules to customize linter behaviorconfig
: use the specified configuration file for all filesfiles
: only lint files matching one of the given glob patternsexclude
: exclude files matching one of the given glob patternsTo customize your in-editor linting experience you can use the following configuration options:
displayErrorsAsWarnings: boolean
: Report findings with severity error
as warning to make them distinguishable from real type errors (e.g. green instead of red squiggles in VS Code)Example:
{
"compilerOptions": {
"plugins": [
{
"name": "@fimbul/mithotyn",
"displayErrorsAsWarnings": true
}
],
// your existing compilerOptions
"strict": true,
}
}
In Visual Studio Code you can choose between the version of TypeScript that comes bundled with the editor or the local one installed in the workspace. Due to technical limitations you need to choose the workspace version to correctly pick up the plugin configured in the previous section.
TypeScript: Select TypeScript Version.
Use Workspace Version
Other editors might work the same as VS Code.
To work around this limitation there will be an editor plugin that automatically loads this LanguageService plugin. Stay tuned.
There are some limitations of the current implementation.
The following limitations will likely be fixed in future releases.
.wotanrc.yaml
and .fimbullinter.yaml
filesApache-2.0 © Klaus Meinhardt
v0.18.0
:warning: Breaking Changes:
exclude
and overrides[].files
) match dotfiles, e.g. *.spec.ts
now matches .foo.spec.ts
.//wotan-enable-line
in a line disabled by //wotan-disable-next-line
is ignoredFileFilterFactory
, FileFilter
, LineSwitchFilterFactory
, LineSwitchParser
and DefaultLineSwitchParser
Features:
//@ts-nocheck
or checkJs: false
) are never linted with type informationreport-useless-directives
CLI option to report unused and redundant enable and disable commentsBugfixes:
wotan
: added missing exports to the public APIFAQs
TypeScript LanguageService plugin for the Fimbullinter project
We found that @fimbul/mithotyn demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.