Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
@rushplay/eslint-plugin-objects
Advanced tools
A small collection of ESLint rules that enforce more strict stylistic conventions for the layout of multi-property objects.
![Stories in Progress](https://badge.waffle.io/davidwaterston/eslint-plugin-objects.svg?label=in%20progress&title=in progress)
Install ESLint either locally or globally, and then install the plugin (see below). It is important to note that a global instance of ESLint can only use plugins that are also installed globally. A local instance of ESLint, however, can make use of both local and global ESLint plugins.
$ npm install -g eslint
$ npm install -g eslint-plugin-objects
$ npm install --save-dev eslint
$ npm install --save-dev eslint-plugin-objects
Add the plugins
section to your config file if not already present and specify eslint-plugin-objects
as a plugin. The eslint-plugin-
prefix may be omitted:
{
"plugins": [
"objects"
]
}
Enable the rules that you would like to use, for example:
{
"rules": {
"objects/no-object-property-split": 2,
"objects/no-object-properties-first-line": 1
}
}
This plugin has been tested and confirmed to work with ESLint versions 0.18.0 and later.
See the change log file for more details.
I use Semantic Versioning to number releases. Each release is tagged with the appropriate version number and signed using Gnu Privacy Guard (GPG). The public key used to sign releases is
Name: David Waterston
Email: david@davidwaterston.com
Key ID: A7AD9C85
Signature: 71A9 DC13 447A 1E4F C6EB 5D64 DE08 A991 A7AD 9C85
This public key is included in the repository with a SHA1 of 16d013451476fa4a1a67d6ad4b90583e205b53b1. After cloning the repo, and assuming you have GPG installed correctly, you can import this key into your keychain
git cat-file blob pubkey | gpg --import
When this public key is successfully imported, you can use it to verify the integrity of any of the tagged releases of this repo
git tag -v v1.0.0
which should produce output similar to:
object 04f37a55784c1f3abc2cf927a935a488aa954035
type commit
tag v1.0.0
tagger David Waterston <david@davidwaterston.com> 1427387056 +0000
Initial commit
This is just an example so don't get fixated on the details, what matters is the signature!
gpg: Signature made Thu 26 Mar 16:24:16 2015 GMT using RSA key ID A7AD9C85
gpg: Good signature from "David Waterston <david@davidwaterston.com>" [ultimate]
The important thing to notice here is that the RSA key ID matches mine (A7AD9C85) and the line that says that this is a good signature.
The public key can further be verified by checking the details held on pgp.mit.edu.
##Missing a feature? Add your idea or vote on your favorite feature to be implemented.
Current and planned work for this repo is public and detailed in Waffle.
Copyright (c) 2015 David Waterston. All rights reserved. Distributed under an MIT license. See the LICENSE file for more details.
FAQs
Eslint rules for multi-property objects.
We found that @rushplay/eslint-plugin-objects demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.