Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
@financial-times/eslint-config-de-tooling
Advanced tools
This is an ESLint configuration which aims to ensure all de-tooling applications' source code is consistent in style.
This plugin extends airbnb's base config along with extra rules provided by eslint-plugin-unicorn.
Install this package together with your application:
npm install --save-dev @financial-times/eslint-config-de-tooling
It's recommended to avoid global installs where possible, as eslint in particular can be volatile with dependency locations.
Extend the config using an eslint config file. For example in an .eslintrc.js
file:
{
"extends": [
"@financial-times/de-tooling"
],
"rules": {
// Override any settings from the "parent" extended configuration
}
}
A mocha config is provided which can be used to extend the base config:
{
"extends": [
"@financial-times/de-tooling",
"@financial-times/de-tooling/test"
],
"rules": {
// Override any settings from the "parent" extended configuration
}
}
This config adds mocha
and sinon
globals and additional rules for mocha
based tests.
A jsx config is provided which replaces the base config, based on the full airbnb config:
{
"extends": [
"@financial-times/de-tooling/react"
],
"rules": {
// Override any settings from the "parent" extended configuration
}
}
This package requires certain dependencies as peerDependencies
. This is a decision consistent with eslint (see https://github.com/eslint/eslint/issues/2518, https://github.com/eslint/eslint/issues/3458). This means they should be installed wherever this package is consumed, with matching version ranges:
It's possible to automatically install these by adapting the steps from eslint-config-airbnb-base, e.g. for Linux/OSX:
(
export PKG=@financial-times/eslint-config-de-tooling;
npm info "$PKG@latest" peerDependencies --json | command sed 's/[\{\},]//g ; s/: /@/g' | xargs npm install --save-dev "$PKG@latest"
)
FAQs
eslint config for de-tooling projects
We found that @financial-times/eslint-config-de-tooling demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 14 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.