
Security News
Feross on Risky Business Weekly Podcast: npm’s Ongoing Supply Chain Attacks
Socket CEO Feross Aboukhadijeh joins Risky Business Weekly to unpack recent npm phishing attacks, their limited impact, and the risks if attackers get smarter.
@rushstack/eslint-bulk
Advanced tools
Roll out new ESLint rules in a large monorepo without cluttering up your code with "eslint-ignore-next-line"
This package provides the command-line interface (CLI) for the ESLint bulk suppressions
feature from @rushstack/eslint-patch
.
👉 Before using this tool, you will first need to install and configure the @rushstack/eslint-patch package.
See the eslint-bulk-suppressions documentation for details.
main
branch, which is in a clean state where ESLint reports no violations.eslint-bulk suppress --all ./src
to update .eslint-bulk-suppressions.json.eslint-bulk prune
periodically to find and remove unnecessary suppressions from .eslint-bulk-suppressions.json, ensuring that new violations will now get caught in those scopes.eslint-bulk suppress --rule NAME1 [--rule NAME2...] PATH1 [PATH2...]
eslint-bulk suppress --all PATH1 [PATH2...]
Use this command to automatically generate bulk suppressions for the specified lint rules and file paths.
The path argument is a glob pattern with the same syntax
as path arguments for the eslint
command.
Use this command to automatically delete all unnecessary suppression entries in all .eslint-bulk-suppressions.json files under the current working directory.
eslint-bulk prune
CHANGELOG.md - Find out what's new in the latest version
@rushstack/eslint-patch
required companion package
@rushstack/eslint-bulk
is part of the Rush Stack family of projects.
FAQs
Roll out new ESLint rules in a large monorepo without cluttering up your code with "eslint-ignore-next-line"
We found that @rushstack/eslint-bulk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket CEO Feross Aboukhadijeh joins Risky Business Weekly to unpack recent npm phishing attacks, their limited impact, and the risks if attackers get smarter.
Product
Socket’s new Tier 1 Reachability filters out up to 80% of irrelevant CVEs, so security teams can focus on the vulnerabilities that matter.
Research
/Security News
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.