
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
@pigjs/fabric
Advanced tools
A collection of configuration files including prettier, eslint, stylelint, husky, git hooks can automatically generate configuration files
一个配置文件的集合,包含了 prettier, eslint, stylelint, husky, git hooks, 可以自动生成配置文件
npm i @pigjs/fabric -D
// or
yarn add @pigjs/fabric -D
// or
pnpm add @pigjs/fabric -D
// package.json 中配置命令
{
scripts:{
"pig-fabric:install":"pig-fabric install"
}
}
// 初始化 fabric,会自动生成 prettier, eslint, stylelint, husky, git hooks 的配置
npm run pig-fabric:install
shamefully-hoist=true
在 settings.json 文件,配置自动保存和格式化
{
"editor.codeActionsOnSave": {
"source.fixAll.eslint": true
},
"editor.formatOnSave": true
}
推荐团队成员使用相同的编辑器(如 VSCode)并共享编辑器设置。创建一个 .vscode 文件夹(如果尚不存在),并在其中添加一个 settings.json 文件,配置自动保存和格式化
在项目根目录创建 .pigrc.js 或者 .pigrc.json 文件
/** 用户自定义配置 */
interface UserConfigProps {
/** git 相关配置 */
gitConfig?: {
/** 校验commit */
verifyCommit?: {
/** 是否开启 */
open?: boolean;
/** 过滤掉msg */
filterMsg?: string[];
/** 校验的规则 */
commitRE?: RegExp;
/** 自定义校验 通过返回空 不通过 返回一个错误字符串,在终端打印 */
customVerifyCommit?: (msg: string) => string;
};
/** 校验合并的分支 */
verifyMergeBranch?: {
/** 是否开启 */
open?: boolean;
/** 禁止合并的分支 */
forbidMergeBranch?: string[];
/** 自定义校验 true-允许合并 false-禁止合并 */
customVerifyMergeBranch?: (branch: string) => boolean;
};
};
}
FAQs
A collection of configuration files including prettier, eslint, stylelint, husky, git hooks can automatically generate configuration files
We found that @pigjs/fabric demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.