
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@mysticatea/eslint-plugin
Advanced tools
Additional ESLint rules and ESLint configurations for me.
npm install --save-dev eslint @mysticatea/eslint-plugin
^6.5.0
, ^8.0.0
, ^9.0.0
or newer versions.^4.19.1
or newer versions.Write in your ESLint configurations: http://eslint.org/docs/user-guide/configuring#using-the-configuration-from-a-plugin
plugin:@mysticatea/es2019
... Basic configuration for ES2019.plugin:@mysticatea/es2018
... Basic configuration for ES2018.plugin:@mysticatea/es2017
... Basic configuration for ES2017.plugin:@mysticatea/es2016
... Basic configuration for ES2016.plugin:@mysticatea/es2015
... Basic configuration for ES2015.plugin:@mysticatea/es5
... Basic configuration for ES5.plugin:@mysticatea/+modules
... Additional configuration for ES modules.plugin:@mysticatea/+browser
... Additional configuration for browser environment.plugin:@mysticatea/+node
... Additional configuration for Node.js environment.plugin:@mysticatea/+eslint-plugin
... Additional configuration for ESLint plugins. This includes plugin:mysticatea/+node
setting.The main configurations plugin:@mysticatea/es*
does:
.ts
files as TypeScript then check by typescript-eslint-parser
and eslint-plugin-typescript
..vue
files as Vue.js SFC then check by vue-eslint-parser
and eslint-plugin-vue
.test
/tests
directory as mocha
's test code.scripts
directory as Node.js environment..eslintrc.js
file as a Node.js script.webpack.config.js
file as a Node.js script.rollup.config.js
file as an ES module.You can use combination of a main configuration and some additional configurations. For examples:
{
"extends": [
"plugin:@mysticatea/es2015",
"plugin:@mysticatea/+node"
]
}
It handles
.js
files as scripts and.mjs
files as modules.
{
"extends": [
"plugin:@mysticatea/es2015",
"plugin:@mysticatea/+browser"
]
}
{
"extends": [
"plugin:@mysticatea/es2015",
"plugin:@mysticatea/+modules",
"plugin:@mysticatea/+browser"
]
}
{
"extends": [
"plugin:@mysticatea/es2015",
"plugin:@mysticatea/+eslint-plugin"
]
}
This plugin has some original rules and foreign rules.
var
declaration as block-scoped. It disallows redeclarations, uses from outside of the scope, shadowing.this
/super
in static methods.for-of
statements instead of Array#forEach
or something like (fixable).@mysticatea/eslint-comments/*
rules are imported from eslint-plugin-eslint-comments.@mysticatea/eslint-plugin/*
rules are imported from eslint-plugin-eslint-plugin.@mysticatea/node/*
rules are imported from eslint-plugin-node.@mysticatea/ts/*
rules are imported from eslint-plugin-typescript.@mysticatea/vue/*
rules are imported from eslint-plugin-vue.@mysticatea/prettier
rule is imported from eslint-plugin-prettier.Q: Why don't you use those plugins directly?
A: The combination with shareable configs and plugins has some problems because shareable configs were not designed to be used with plugins. @nzakas illustrated a way to use plugins as shareable configs together with other plugins in the discussion eslint/eslint#3458. This is the way.
This plugin follows semantic versioning and ESLint's Semantic Versioning Policy.
Welcome contributing!
Please use GitHub's Issues/PRs.
npm test
runs tests and measures coverage.npm run clean
removes the coverage result of npm test
command.npm run coverage
shows the coverage result of npm test
command.npm run update
updates auto-generated files.npm run watch
runs tests and measures coverage when source code are changed.FAQs
Additional ESLint rules.
The npm package @mysticatea/eslint-plugin receives a total of 820 weekly downloads. As such, @mysticatea/eslint-plugin popularity was classified as not popular.
We found that @mysticatea/eslint-plugin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.