
Security News
Nx npm Packages Compromised in Supply Chain Attack Weaponizing AI CLI Tools
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
@lucca/stylelint-config-prisme
Advanced tools
This package is a shareable stylelint configuration.
Stylelint checks for common mistakes in CSS and CSS-like files, and allows to define rules for tools and developers.
Prettier should be used to handle coding style-guides when possible.
npm i --save-dev stylelint @lucca/stylelint-config-prisme
Remove any pre-existing configuration (file or statements in package.json).
Use this package in a stylelint.config.js file in your repository:
module.exports = {
extends: ['@lucca/stylelint-config-prisme'],
rules: {},
};
Add the relevant script to lint the code in Jenkins.
"stylelint": "stylelint \"./**/*.scss\"",
You can be more specific and restrict the path of scss files being linted: "stylelint": "stylelint \"./SOME_PATH/**/*.scss\""
,
showCachePath
parameterTo avoid hitting Github’s rate limit, the script caches Milestones versions in a local file. Knowing which file has been created can be useful, but also hard to find.
Webstorm has an issue with outputting the information during the linting, so outputting the path is optional with a parameter:
npx stylelint "./**/*.scss" showCachePath
You can apply specific rules with overrides as needed.
Rules can be disabled while incrementally fixing your code. Set them to null
. The following example will ignore the no-descending-specificity
rule in all SCSS files within `some-path :
module.exports = {
extends: ['@lucca/stylelint-config-prisme'],
overrides: [
{
files: ['some-path/**/*.scss'],
rules: {
'no-descending-specificity': null,
}
},
],
rules: {};
};
If needed, each rule can be ignored with stylelint-(dis|en)able.
Please explain why with a comment if you’re doing so. Use stylelint-disable[-*] -- Comment
and enable stylelint back as soon as possible: stylelint-enable
.
Dates or versions from LF might not show in Stylelint messages.
The cause can be the request to the Github API is blocked because of rate limits on your current IP, resulting in an empty file.
npx stylelint "./**/*.scss"
.npm pack
. This will generate a .tgz file.npm i PATH_TO_LUCCA_FRONT_REPOSITORY/packages/stylelint-config/lucca-stylelint-config-prisme-0.0.0.tgz
.The configuration from your local repository should be applied right away. If in doubt, restart your editor.
⚠️ A VSCode extension bug might prevent you from using stylelint 16+. See below for a fix through VS-code settings.
Those settings in .vscode/settings.json should be fine, but you can also follow instructions on the extension page: :
"[scss]": {
"editor.formatOnSave": true,
"editor.defaultFormatter": "stylelint.vscode-stylelint",
"editor.codeActionsOnSave": {
"source.fixAll.stylelint": "explicit"
}
},
"stylelint.reportInvalidScopeDisables": true,
"stylelint.reportNeedlessDisables": true,
"stylelint.snippet": ["css", "scss"],
"stylelint.validate": ["css", "scss"],
Please note the VSCode extension does not take overrides into account.
A hackfix is available.
Add the following line in .vscode/settings.json if the issue arises:
"stylelint.customSyntax": "postcss-scss"
You might need to rename stylelint.config.js to stylelint.config.cjs (CommonJS) and adapt the code in consequence.
In Stylelint settings, make sure Run for files is for SCSS files (**/*.{scss}
). It is only for CSS files by default (**/*.{css}
).
FAQs
Lucca Front stylelint configuration
The npm package @lucca/stylelint-config-prisme receives a total of 766 weekly downloads. As such, @lucca/stylelint-config-prisme popularity was classified as not popular.
We found that @lucca/stylelint-config-prisme demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.