
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@netcentric/eslint-config
Advanced tools
This package provides Cognizant Netcentric's ESLint configuration as an extensible shared config.
If ESLint is new to you, you might want to check out what it does and how to configure it.
npm i @netcentric/eslint-config
Create or update your .eslintrc
file:
{
"extends": "@netcentric/eslint-config"
}
Most IDEs should have an integration for ESLint.
If you are using https://github.com/Netcentric/fe-build, ESLint is integrated by default.
For custom lint task, update package.json
"scripts": {
"lint:js": "eslint path/to/source-js-files"
}
Make sure you do not accidently lint files you are not interested that are out of scope for your build; e.g. files within the node_modules
folder.
Please stick to the Netcentric rules as they are battle tested and were created to form a company wide basis for JS code quality. If there's a very specific case you want to deactivate a rule for consider using Eslint inline comments instead.
If there's a rule you consider as outdated or simply wrong please contact the package's maintainer or file an issue in JIRA (bugs
in package.json
) or create a PR on the package's repository (repository
in package.json
).
If you have a very project specific case where adding or deactivating a rule makes perfectly sense, you can overwrite any rule using the rules
property.
You can find a description of all rules on the Eslint Homepage.
FAQs
Netcentric's coding and style rules for Eslint
The npm package @netcentric/eslint-config receives a total of 12 weekly downloads. As such, @netcentric/eslint-config popularity was classified as not popular.
We found that @netcentric/eslint-config demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.