
Security News
Crates.io Implements Trusted Publishing Support
Crates.io adds Trusted Publishing support, enabling secure GitHub Actions-based crate releases without long-lived API tokens.
@hint/hint-manifest-file-extension
Advanced tools
hint that that checks if the web app manifest file has the correct file extension
manifest-file-extension
)manifest-file-extension
warns against using non-standard file
extensions for the web app manifest file.
While the .webmanifest
file extension is not
enforced by the specification, nor is it required by browsers, using
it makes it:
The hint checks if the recommended .webmanifest
file extension is used for the web app manifest file.
<link rel="manifest" href="site.json">
<link rel="manifest" href="site.manifest">
<link rel="manifest" href="site.webmanifest">
This package is installed automatically by webhint:
npm install hint --save-dev
To use it, activate it via the .hintrc
configuration file:
{
"connector": {...},
"formatters": [...],
"hints": {
"manifest-file-extension": "error",
...
},
"parsers": [...],
...
}
Note: The recommended way of running webhint is as a devDependency
of
your project.
FAQs
hint that that checks if the web app manifest file has the correct file extension
The npm package @hint/hint-manifest-file-extension receives a total of 25,925 weekly downloads. As such, @hint/hint-manifest-file-extension popularity was classified as popular.
We found that @hint/hint-manifest-file-extension demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Crates.io adds Trusted Publishing support, enabling secure GitHub Actions-based crate releases without long-lived API tokens.
Research
/Security News
Undocumented protestware found in 28 npm packages disrupts UI for Russian-language users visiting Russian and Belarusian domains.
Research
/Security News
North Korean threat actors deploy 67 malicious npm packages using the newly discovered XORIndex malware loader.