
Research
/Security News
Popular Tinycolor npm Package Compromised in Supply Chain Attack Affecting 40+ Packages
Malicious update to @ctrl/tinycolor on npm is part of a supply-chain attack hitting 40+ packages across maintainers
@mia-platform/eslint-config-mia
Advanced tools
The ESLint Shareable Config for Mia-Platform JavaScript Style
The package require eslint
to work, to list the correct version you can run:
npm info "@mia-platform/eslint-config-mia@latest" peerDependencies
You can run this command:
npx install-peerdeps --dev @mia-platform/eslint-config-mia
You can run this command:
(
export PKG="@mia-platform/eslint-config-mia";
npm info "${PKG}@latest" peerDependencies --json | command sed 's/[\{\},]//g ; s/: /@/g' | xargs npm install --save-dev "${PKG}@latest"
)
Which produces and runs a command like:
npm install --save-dev @mia-platform/eslint-config-mia eslint@^#.#.#
If using npm < 5, Windows users can either install all the peer dependencies manually, or use the install-peerdeps cli tool.
npm install -g install-peerdeps
install-peerdeps --dev @mia-platform/eslint-config-mia
The cli will produce and run a command like:
npm install --save-dev @mia-platform/eslint-config-mia eslint@^#.#.#
ESLint Shareable Configs are meant to work with the extends
feature of the .eslintrc
file.
You can learn more about Shareable Config on the official ESLint website.
To set up the config add a file named .eslintrc
with this content:
{
"extends": "@mia-platform/eslint-config-mia"
}
Then you can override settings from the shareable configuration by adding them directly
into your .eslintrc
file.
Or you can add this snippet in your package.json
and add the override inside the eslintConfig
object:
"eslintConfig": {
"extends": "@mia-platform/eslint-config-mia"
}
Then you can add a new script in your package.json
like this:
"scripts": {
"lint": "eslint . --ignore-path .gitignore"
}
The --ignore-path
can be ignored (🙃) if you already have a .eslintignore
file. We raccomend to use it
for avoiding to parse and lint files that will not be committed.
You want to show that you use this in your project? Feel free to add this badge to your README file.
[](https://github.com/mia-platform/eslint-config-mia)
v3.0.0 - 2020-03-14
FAQs
Mia-Platform javascript lint rules
The npm package @mia-platform/eslint-config-mia receives a total of 1,222 weekly downloads. As such, @mia-platform/eslint-config-mia popularity was classified as popular.
We found that @mia-platform/eslint-config-mia demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Malicious update to @ctrl/tinycolor on npm is part of a supply-chain attack hitting 40+ packages across maintainers
Security News
pnpm's new minimumReleaseAge setting delays package updates to prevent supply chain attacks, with other tools like Taze and NCU following suit.
Security News
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.