Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@gravitywelluk/eslint-plugin-test
Advanced tools
Gravitywell defined ESLint rule sets as a ESLint plugin
Gravitywell defined ESLint rule sets for ESLint.
As this package is not yet on NPM, you will need to tell your NPM package manager where to find it.
In your ~/.npmrc
file as the following line,
@gravitywelluk:registry=https://npm.pkg.github.com/
Now you can install the package,
# Yarn
yarn add -D @gravitywelluk/eslint-plugin
# NPM
npm install --save-dev @gravitywelluk/eslint-plugin
In your .eslintrc
file, add the package as a plugin.
plugins: [ "@gravitywelluk/eslint-plugin" ]
There are 4 configurations to choose from:
@gravitywelluk/eslint-recommended
@gravitywelluk/typescript-recommended
@gravitywelluk/react-recommended
@gravitywelluk/react-native-recommended
Note: You will only need to choose ONE from the list above as they inherit each other. Make sure that it is placed last in the extends
array.
plugins: [ "@gravitywelluk/eslint-plugin" ]
extends: [ "@gravitywelluk/react-recommended" ],
@gravitywelluk/eslint-recommended
extends: [ "@gravitywelluk/eslint-recommended" ],
This includes the following plugins and rules including Gravitywell's own override rules:
@gravitywelluk/typescript-recommended
extends: [ "@gravitywelluk/typescript-recommended" ],
This includes @gravitywelluk/eslint-recommended
and the following plugins and rules :
@gravitywelluk/react-recommended
extends: [ "@gravitywelluk/react-recommended" ],
This includes @gravitywelluk/typescript-recommended
and the following plugins and rules :
@gravitywelluk/react-native-recommended
extends: [ "@gravitywelluk/react-native-recommended" ],
This includes @gravitywelluk/react-recommended
and the following plugins and rules :
To contribute to this package you will need to first setup access to GitHub packages.
You will firstly need to create a GitHub Personal Access Token (PAT). Use the following link on Creating a personal access token.
You will then need to add the following to your ~/.npmrc
file.
//npm.pkg.github.com/:_authToken=GITHUB_PAT
Contribute using the Git Truck flow (pull-request
> master
).
TODO - Continuous integration to bump the version and publish the package once a merge has been made into master.
FAQs
Gravitywell defined ESLint rule sets as a ESLint plugin
We found that @gravitywelluk/eslint-plugin-test demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.