
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@finos/eslint-plugin-legend-studio
Advanced tools
This plugin includes 3 configs:
recommended
: This config turns on rules in recommended configs for ESLint
, eslint-plugin-import
, React
, Prettier
, and Typescript
. These rules are light-weighted, and suitable to run on incremental build during development.computationally-expensive
: This config turns on computationally expensive rules. For example: Typescript type-ware checks, import rules that require checking multiple files, indentation rules, etc. These rules are not suitable to run on incremental build as they seriously increase effective rebuild time.scripts-override
: This config turns off certain rules which are not suitable for script files or Javascript files (i.e. Typescript-specific rules). As such, this config if used in tandem with other configs, should go last.Following is an example of usage:
module.exports = {
root: true, // tell ESLint to stop looking further up in directory tree to resolve for parent configs
parserOptions: {
// `parserOptions.project` is required for generating parser service to run specific Typescript rules
project: ['packages/*/tsconfig.json'],
},
plugins: ['@finos/legend-application-studio'],
extends: [
'plugin:@finos/legend-application-studio/recommended',
'plugin:@finos/legend-application-studio/computationally-expensive',
'plugin:@finos/legend-application-studio/scripts-override',
].filter(Boolean),
};
Note that for the imports, we can use either
@finos/legend-application-studio/
or@finos/eslint-plugin-legend-studio/
as prefix and the rules, configs, and plugin will be picked up by ESLint just fine.
FAQs
ESLint rules for Legend Studio
The npm package @finos/eslint-plugin-legend-studio receives a total of 337 weekly downloads. As such, @finos/eslint-plugin-legend-studio popularity was classified as not popular.
We found that @finos/eslint-plugin-legend-studio demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.