Security News
Input Validation Vulnerabilities Dominate MITRE's 2024 CWE Top 25 List
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
@silvermine/eslint-plugin-silvermine
Advanced tools
eslint plugins to support our JS Code Standards. See @silvermine/eslint-config-silvermine
Shareable ESLint plugins that are used by our shareable config rules. See eslint-config-silvermine for more details.
Because we need it. Whitespace errors are evil. As are the other hundreds of types of errors this protects us from.
You'll first need to install ESLint:
$ npm install eslint --save-dev
Next, install @silvermine/eslint-plugin-silvermine
:
$ npm install @silvermine/eslint-plugin-silvermine --save-dev
Add silvermine
to the plugins section of your .eslintrc
configuration file. You can omit the eslint-plugin-
prefix:
{
"plugins": [
"@silvermine/eslint-plugin-silvermine"
]
}
Then configure the rules you want to use under the rules section.
{
"rules": {
"@silvermine/silvermine/fluent-chaining": 2
}
}
There are some unusual concepts with this repo that we have to deal with when versioning it. For example, this repo is the set of plugins that are required by our eslint config, but this repo is itself linted by our eslint config - a cyclical dependency. Also, what is a "breaking change" in this repo? Definitely a major change to our coding standards (e.g. changing how many spaces we use for indents, or changing to tabs) would be a major, breaking change because every code file would need to be changed. But there are many smaller changes that can be made (introducing a new rule that we've basically followed by convention, for example) that are not really breaking, but may require some minor codebase changes when you upgrade to the newer rule config. Even fixing a bug (a patch version) could require changes to your codebase if the rule implementation was not finding violations previously.
Thus, we've decided that on this particular repo we will not strictly follow semantic versioning. Instead, new rules can be added with a minor version bump. Something that's strictly a bug fix of an existing rule (not changing the principle of the rule) can be done in a patch version. Major versions will be reserved for massive, sweeping changes in rules - in other words, primarily big policy changes rather than simply technical changes.
This software is released under the MIT license. See the license file for more details.
FAQs
eslint plugins to support our JS Code Standards. See @silvermine/eslint-config-silvermine
We found that @silvermine/eslint-plugin-silvermine demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.