
Security News
npm Adopts OIDC for Trusted Publishing in CI/CD Workflows
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
@icetee/eslint-etc
Advanced tools
More utils for use with eslint
.
I use these utils to implement and test my own ESLint rules. That's their primary purpose, so the documentation is ... light.
fromFixture
allows TSLint-like fixtures to be used to test ESlint rules. Using fixtures means that you don't have to specify lines and columns. Instead, you underline the failure locations within the fixture, like this:
{
invalid: [
fromFixture(stripIndent`
const name = "alice";
~~~~ [foo { "identifier": "name" }]
~~~~~~~ [bar]
const role = 'cto';
~~~~ [foo { "identifier": "role" }]
`),
fromFixture(stripIndent`
const name = "alice";
~~~~ [foo { "identifier": "name" }]
const role = 'cto';
~~~~ [foo { "identifier": "role" }]
`, {
options: [{ bar: false }]
}),
]
}
which is equivalent to the following:
{
invalid: [{
code: `const name = "alice";
const role = 'cto';`,
errors: [{
column: 7,
endColumn: 11,
line: 1,
endLine: 1,
messageId: "foo",
data: {
identifier: "name",
},
}, {
column: 14,
endColumn: 21,
line: 1,
endLine: 1,
messageId: "bar",
data: {},
}, {
column: 7,
endColumn: 11,
line: 2,
endLine: 2,
messageId: "foo",
data: {
identifier: "role",
},
}]
}, {
code: `const name = "alice";
const role = 'cto';`,
errors: [{
column: 7,
endColumn: 11,
line: 1,
endLine: 1,
messageId: "foo",
data: {
identifier: "name",
},
}, {
column: 7,
endColumn: 11,
line: 2,
endLine: 2,
messageId: "foo",
data: {
identifier: "role",
},
}],
options: [{
bar: false
}]
}]
}
Specifying data
in the fixture is optional. If it's omitted, data
defaults to {}
.
The second, optional, argument passed to fromFixture
can be used to pass additional test case properties - options
and output
, etc.
A suggestions
array can be passed to fromFixture
via its second, optional parameter and, when passed, a suggest
annotation can be used within the fixture, like this:
fromFixture(stripIndent`
const a = "alice";
~~~~~~~ [foo suggest]
`, {
suggestions: [{
messageId: "suggestionForFoo",
output: "/* suggestion output goes here */"
}]
}),
And it's possible to include multiple suggest
annotations and suggestions in a single fixture:
fromFixture(stripIndent`
const a = "alice";
~~~~~~~ [foo suggest 0]
const b = "bob";
~~~~~ [bar suggest 1]
`, {
suggestions: [{
messageId: "suggestionForFoo",
output: "/* suggestion for foo output goes here */"
}, {
messageId: "suggestionForBar",
output: "/* suggestion for bar output goes here */"
}]
}),
The suggest
annotations work with the suggestions
array in the following manner:
suggest
is specified with no indices, all suggestions are associated with the annotated error.suggest
is specified with indices, suggestions at those indices are associated with the annotated error.suggest
is not specified, no suggestions are associated with the annotated error.suggestions
are specified without a suggest
annotation being used, fromFixture
will throw an error.And if the rule has both a fixer and suggestions, you can specify an output
- for the fixer - in conjunction with a suggestions
array:
fromFixture(stripIndent`
const a = "alice";
~~~~~~~ [foo suggest]
`, {
output: "/* fixer output goes here */",
suggestions: [{
messageId: "suggestionForFoo",
output: "/* suggestion output goes here */"
}]
}),
FAQs
Utils for ESLint TypeScript rules
We found that @icetee/eslint-etc demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.