Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
@okta/eslint-plugin-okta
Advanced tools
This package contains Okta's custom ESlint rules.
Table of Contents
This plugin provides a sharable configuration that can be extended in any UI project.
To use this preset, add the following to your configuration file:
module.exports = {
extends: [
'plugin:@okta/okta/recommended',
'plugin:@okta/okta/courage-app', // Intended for Courage-based web applications
],
}
Extending an existing config with this sharable configuration will result in all *.properties
and *.js
files in your project to be checked. To apply rules specifically to *.js
files, utilize the overrides
entry to separate these rules:
module.exports = {
extends: [
'plugin:@okta/okta/recommended',
],
overrides: [
{
files: ['*.js'],
rules: [
'max-len': ['error', { code: 120 }],
// List of additional rules to be run on JS files
]
},
]
}
Rule | Description |
---|---|
no-exclusive-language | Disallow exclusionary words |
no-mission-i18n-comments | Disallow messages without comments for arguments and single-word messages |
no-unlocalized-text | Disallow hardcoded English text in Courage components |
no-unlocalized-text-in-templates | Disallow hardcoded English text in templates |
Processors | Description |
---|---|
properties | Parse properties files as JavaScript |
Custom rules follow the standard ESLint guidelines - check out their Working with Rules page for a good primer. When writing rules, you'll often need to find the right Selector to match the nodes you want to test against - a useful tool for finding these is the AST Explorer.
Once you've got the basics down, create these 3 files. When coming up with a rule name, follow the Rule Naming Conventions, and check out ESLint's list of rules for examples of good rule names.
lib/rules/${your-rule}.js
This is the rule definition. If it's possible, add a fix function to the rule.
lib/rules/${your-rule}.test.js
This is the test file. We use ESLint's RuleTester, which makes this extra easy.
docs/rules/${your-rule}.md
This is the documentation for your rule. Check out the existing docs, or brows through ESLint's own rule docs for good examples of what you should write.
As you're writing your rule, you can run the tests with yarn:
yarn test
FAQs
Linting rules for Okta JS clients
The npm package @okta/eslint-plugin-okta receives a total of 409 weekly downloads. As such, @okta/eslint-plugin-okta popularity was classified as not popular.
We found that @okta/eslint-plugin-okta demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.