Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@looker/eslint-config
Advanced tools
## looker-open-source Typescript / Javascript Configuration
This repository provides shared configuration for tooling used in Typescript/Javascript projects in development as part of the @looker/components
It provides configurations for:
We've included support for React & Styled Components in our configurations as they're very commonly used in Looker Typescript projects.
The default export contains all default Airbnb ESLint rules, including ECMAScript 6+, and the ones listed below. It requires some peerDependencies as well.
Install the package with
yarn add @looker/eslint-config eslint -D
Add the config to either your package.json
:
{
"eslintConfig": {
"extends": ["@looker/eslint-config"]
}
}
to your eslint.config.js
(or .eslintrc.js
):
module.exports = {
extends: ['@looker/eslint-config', '@looker/eslint-config/license-header'],
}
NOTE: Adding an eslint.config.js
file will allow you to add your own rules to so that your package can add (or disable) additional lint rules as needed:
module.exports = {
extends: ['@looker/eslint-config'],
rules: {
/* @TODO - To level-up our code quality we shouldn't ever use `any` */
'@typescript-eslint/no-explicit-any': 'off',
},
}
If you need to have a consistent license header applied to your files you can include support for by extending @looker/eslint-config/license-header
.
FAQs
## looker-open-source Typescript / Javascript Configuration
We found that @looker/eslint-config demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.