
Security News
PodRocket Podcast: Inside the Recent npm Supply Chain Attacks
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
@node-core/remark-lint
Advanced tools
A [`remark-lint`](https://github.com/remarkjs/remark-lint) plugin with configurations tailored to the documentation and contribution standards of the [Node.js GitHub Organization](https://github.com/nodejs).
@node-core/remark-lint
A remark-lint
plugin with configurations tailored to the documentation and contribution standards of the Node.js GitHub Organization.
npm install --save-dev @node-core/remark-lint
Add the plugin to your .remarkrc
or remark.config.js
:
{
"plugins": ["@node-core/remark-lint"]
}
Run remark to lint your Markdown files:
npx remark . --frail
Some rules, such as node-core:yaml-comments
, validate version references against known released Node.js versions. You can provide these using the releasedVersions
option:
{
"plugins": [
[
"@node-core/remark-lint",
{
"releasedVersions": ["v18.0.0", "v18.1.0", "v18.2.0", "v20.0.0"]
}
]
]
}
For Node.js projects, these versions can be automatically generated using list-released-versions-from-changelogs.mjs
.
If not specified, version-related rules will accept any valid SemVer format.
node-core:duplicate-stability-nodes
Prevents redundant stability markers in nested sections.
Not allowed:
# Parent Section
> Stability: 2 - Stable
## Child Section
> Stability: 2 - Stable <!-- Redundant! -->
node-core:hashed-self-reference
Ensures self-references use fragment-only links.
Allowed:
See the [Introduction](#introduction) section.
Not allowed:
See the [Introduction](document.md#introduction) section.
node-core:ordered-references
Enforces alphabetical sorting of reference-style link definitions.
Allowed:
[api]: https://example.com/api
[docs]: https://example.com/docs
[info]: https://example.com/info
node-core:required-metadata
Requires essential metadata for documentation:
llm_description
: A description for Large Language Models (can be inferred from first paragraph)introduced_in
: API introduction versionMetadata can be provided in comments:
<!-- llm_description= Utilities for working with file paths -->
node-core:yaml-comments
Enforces structure and content of YAML comment blocks:
added
: An array of valid version stringsnapiVersion
: The N-API versiondeprecated
: An array of valid version stringsremoved
: An array of valid version stringschanges
: An array of:
pr-url
: Pull request URLcommit
: Commit hash (only required for security fixes)version
: Valid version stringdescription
: Change descriptionAll version references must be valid SemVer, or match the provided releasedVersions
.
FAQs
A [`remark-lint`](https://github.com/remarkjs/remark-lint) plugin with configurations tailored to the documentation and contribution standards of the [Node.js GitHub Organization](https://github.com/nodejs).
We found that @node-core/remark-lint demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.