
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@steveworkman/vue-cli-plugin-stylelint
Advanced tools
stylelint plugin for vue-cli
vue-cli-service lint:style
Usage: vue-cli-service lint:style [options] [...files]
Options:
--no-fix do not auto-fix errors
--options list additional stylelint cli options
Lints and fixes files. If no specific files are given, it lints all vue files, html files, and stylesheets in src
.
Lint on (re)build with stylelint-webpack-plugin
can be enabled with the lintStyleOnBuild
option. You can also provide additional options to stylelint. See available options on the stylelint website.
module.exports = {
// ...
pluginOptions: {
lintStyleOnBuild: true,
stylelint: {
fix: true, // boolean (default: true)
files: '', // string | [string] (default: ['src/**/*.{vue,htm,html,css,sss,less,scss}'])
// See https://stylelint.io/developer-guide/formatters/
formatter: () => {} // function (default: require('stylelint-codeframe-formatter'))
// etc...
}
}
}
Add the following to your preset.json
"@steveworkman/vue-cli-plugin-stylelint": {
"version": "^2.1.0",
"config": {
...
}
}
via vue-cli (recommended)
vue add @steveworkman/vue-cli-plugin-stylelint
via yarn
yarn add -D @steveworkman/vue-cli-plugin-stylelint
vue invoke @steveworkman/vue-cli-plugin-stylelint
via npm
npm install --save-dev @steveworkman/vue-cli-plugin-stylelint
vue invoke @steveworkman/vue-cli-plugin-stylelint
config.plugin('stylelint')
config.plugin('stylelint').use('stylelint-webpack-plugin')
config.plugin('friendly-errors').tap(/* Adds additional transformer and formatter */)
FAQs
stylelint plugin for vue-cli
We found that @steveworkman/vue-cli-plugin-stylelint demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.