
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@superkoders/prettier-config
Advanced tools
SK shareable prettier config, which is prepared for use with our eslint configuration
npm i -D @superkoders/prettier-config
This tells prettier where to locate our rules. You can also override the rules here, if you have some exception on a given project.
module.exports = {
...require('@superkoders/prettier-config'),
};
If you need to make special overrides for given project, you can do so like this:
module.exports = {
...require('@superkoders/prettier-config'),
useTabs: true // you can add overrides like so
};
Specify paths and files you don't want to autoformat. Be sure to ignore minified 3rd party files. Good starting point might be this:
*.md
*.mdown
*.mdx
package.json
package-lock.json
web/*
src/js/static/*
**/node_modules/**/*
Make sure, that line endings will be same accross platforms / OS. This line will make the magic:
* text eol=lf
Download an extension, which will highlight problematic code and give you options how to fix it or which will auto format it as you save. Prettier do VS Code
Ideally, save those settings in .vscode/settings.json
so it lives with the project, if it isn't there already.
"editor.formatOnSave": true,
"prettier.requireConfig": true, // Only format configured projects
FAQs
SUPERKODERS prettier configuration
The npm package @superkoders/prettier-config receives a total of 358 weekly downloads. As such, @superkoders/prettier-config popularity was classified as not popular.
We found that @superkoders/prettier-config demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.