
Security News
Risky Biz Podcast: Making Reachability Analysis Work in Real-World Codebases
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
@mediacurrent/prettier-config
Advanced tools
Make sure all of your code is run through Prettier when you commit it to git. We achieve this by configuring prettier to run on git hooks using husky and lint-staged.
Make sure all of your code is run through Prettier when you commit it to git. We achieve this by configuring prettier to run on git hooks using husky and lint-staged.
npm install --save-dev prettier @mediacurrent/prettier-config
Can be extended two ways:
Add the following to you package.json
"prettier": "@mediacurrent/prettier-config"
This method does not allow overrides. If overrides are needed, use the next method.
module.exports = {
...require("@mediacurrent/prettier-config"),
// Override here
semi: false,
};
Unfortunately, Prettier does not have a way to extend a shared .prettierignore
file so the one in this repo must be copied and pasted in to a new .prettierignore
file at the root of your project.
To have prettier format all files before commit (to prevent unformatted files from being committed), follow these steps.
npm install --save-dev husky lint-staged
package.json
This will affect .js
, .md
, .mdx
, .json
, and .scss
files. For this to work properly, eslint and sass-lint need to have been configured properly.
Add the following husky
and lint-staged
commands to your package.json
.
{
"husky": {
"hooks": {
"pre-commit": "lint-staged"
}
},
"lint-staged": {
"*.{js,md,mdx,json}": "['prettier --write']",
"*.scss": "npm run lint:sass",
}
}
FAQs
Make sure all of your code is run through Prettier when you commit it to git. We achieve this by configuring prettier to run on git hooks using husky and lint-staged.
The npm package @mediacurrent/prettier-config receives a total of 0 weekly downloads. As such, @mediacurrent/prettier-config popularity was classified as not popular.
We found that @mediacurrent/prettier-config demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.