
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@jiakun-zhao/config
Advanced tools
Shared config package that exports oxlint rule presets and oxfmt formatter config for downstream consumption.
npm i -D @jiakun-zhao/config oxfmt oxlint oxlint-tsgolint
Create oxfmt.config.ts:
import { defineOxfmtConfig } from '@jiakun-zhao/config'
export default defineOxfmtConfig()
Pass options to override defaults:
import { defineOxfmtConfig } from '@jiakun-zhao/config'
export default defineOxfmtConfig({ semi: true })
Create oxlint.config.ts:
import { defineOxlintConfig } from '@jiakun-zhao/config'
export default defineOxlintConfig()
Pass options to override defaults:
import { defineOxlintConfig } from '@jiakun-zhao/config'
export default defineOxlintConfig({
rules: { 'typescript/ban-types': 'off' },
})
| Option | Default |
|---|---|
jsxSingleQuote | true |
semi | false |
singleQuote | true |
sortImports.newlinesBetween | false |
sortPackageJson.sortScripts | true |
Categories (all set to error): correctness, perf, restriction, style, suspicious
Plugins: eslint, typescript, unicorn, oxc, import, jsdoc, jsx-a11y, node, promise, vitest
Options: typeAware: true, typeCheck: true
Rules:
| Rule | Severity |
|---|---|
eslint/func-style | off |
eslint/sort-imports | off |
import/group-exports | off |
import/no-default-export | off |
import/no-named-export | off |
import/prefer-default-export | off |
typescript/ban-types | error |
unicorn/prefer-node-protocol | error |
MIT
FAQs
MY CONFIG.
The npm package @jiakun-zhao/config receives a total of 4 weekly downloads. As such, @jiakun-zhao/config popularity was classified as not popular.
We found that @jiakun-zhao/config demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.