
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@officient/readable
Advanced tools
PHP code analyzer, similar to eslint, but with a focus on readability. The idea is to build an analyzer that can guarantee long term code maintainability for a project. The main project values are extendibility, ease of use, speed of analysis and simplicity.
quick links: Rules and default configuration
You can install readable using npm:
$ npm install officient/readable#master --save-dev
While developing you can update to latest master with
$ npm uninstall readable && npm install officient/readable#master
You should then set up a configuration file:
$ npx readable --init
After that, you can run readable on any file or directory like this:
$ npx readable
Returns 0 if no errors. Returns 1 if there are some errors. Can return 2 if some exception happend during linting.
After running readable --init
, you'll have a .readable.json
file in your directory. In it, you'll see some rules configured like this:
{
"pathes": [
"src/"
],
"rules": {}
}
Create baseline file:
$ npx readable --save-base-line .baseline.json
Add "baseline"
param to your .readable.json
:
{
"baseline": ".baseline.json",
"pathes": [
"src/"
],
"rules": {}
}
Now errors from baseline file would be ignored. If you want to see all errors run
with --disable-base-line
flag:
$ npx readable --disable-base-line
See Rules and default configuration for default rules. Or read how to create a custom rule.
To lint code run:
npm run lint
To fix lint:
npm run fix
To test:
npm run test
To update api docs:
npm run docs
FAQs
PHP code linter
The npm package @officient/readable receives a total of 0 weekly downloads. As such, @officient/readable popularity was classified as not popular.
We found that @officient/readable demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.