Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@hjkcai/eslint-config-halo
Advanced tools
本规则是我在 halo 团队发起的,多年前端编码的规则沉淀
首先安装 ESLint 和规则:
npm install -D eslint @hjkcai/eslint-config-halo
在你的项目的根目录下创建一个 .eslintrc.js
文件,根据你的项目类型,复制下面的代码到该文件中。同时下面也提供了参考的 package.json
scripts 配置,可以自行加入到已有的项目中去。
module.exports = {
extends: '@hjkcai/eslint-config-halo/js'
};
{
"scripts": {
"lint": "eslint ."
}
}
module.exports = {
extends: '@hjkcai/eslint-config-halo/js/react'
};
{
"scripts": {
"lint": "eslint . --ext .js,.jsx"
}
}
注:Vue 规则暂时不完善,如需使用,欢迎一起建设
module.exports = {
extends: '@hjkcai/eslint-config-halo/js/vue'
};
{
"scripts": {
"lint": "eslint . --ext .js,.jsx,.vue"
}
}
module.exports = {
extends: '@hjkcai/eslint-config-halo/ts'
};
{
"scripts": {
"lint": "eslint . --ext .js,.ts"
}
}
module.exports = {
extends: '@hjkcai/eslint-config-halo/ts/react'
};
{
"scripts": {
"lint": "eslint . --ext .js,.jsx,.ts,.tsx"
}
}
注:Vue 规则暂时不完善,如需使用,欢迎一起建设
module.exports = {
extends: '@hjkcai/eslint-config-halo/ts/vue'
};
{
"scripts": {
"lint": "eslint . --ext .js,.jsx,.ts,.tsx,.vue"
}
}
对于某些需要非常认真地对待的项目,不能马虎的那种,推荐使用 TypeScript 严格模式配置。
module.exports = {
extends: '@hjkcai/eslint-config-halo/ts-strict'
};
{
"scripts": {
"lint": "eslint . --ext .js,.ts"
}
}
module.exports = {
extends: '@hjkcai/eslint-config-halo/ts-strict/react'
};
{
"scripts": {
"lint": "eslint . --ext .js,.jsx,.ts,.tsx"
}
}
MIT
FAQs
The eslint config for halo team
The npm package @hjkcai/eslint-config-halo receives a total of 2 weekly downloads. As such, @hjkcai/eslint-config-halo popularity was classified as not popular.
We found that @hjkcai/eslint-config-halo demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.