
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
@tinkoff/eslint-config
Advanced tools
ESlint plugin includes rules for JS and TS codebase. Better to use with framework-oriented packages @tinkoff/eslint-config-react
or @tinkoff/eslint-config-angular
Install from npm
npm i --save-dev @tinkoff/eslint-config
Then, need to include necessary configurations sets to .eslintrc
. Wee need to choose base configuration, and any
necessary additional configs. Package include eslint and prettier dependencies, so you should remove eslint, prettier from your project package.json because those packages are transitive dependencies.
{
"extends": ["@tinkoff/eslint-config/app"]
}
{
"extends": ["@tinkoff/eslint-config/lib"]
}
{
"extends": ["@tinkoff/eslint-config/app", "@tinkoff/eslint-config/jest"]
}
Main configurations sets contains common rules
@tinkoff/eslint-config/app
- common rules and specific rules for applications@tinkoff/eslint-config/lib
- common rules and specific rules for librariesAdditional configurations sets. This configs not contain common eslint rules, and must be included with main configurations
@tinkoff/eslint-config/jest
- rules for lint Jest test suits@tinkoff/eslint-config/app
and @tinkoff/eslint-config/lib
include:
eslint-config-airbnb
- common and popular configurationeslint-plugin-eslint-comments
- validate eslint
commentseslint-plugin-import
- validate proper importseslint-plugin-promise
- enforce best practices for promiseseslint-plugin-jest
- validate jest tests@typescript-eslint/eslint-plugin
- lint TypeScript files, adopt many eslint rules to TS code, and provide specific
TS ruleseslint-plugin-prettier
- disable code formatting using eslint tools and transfers all the logic to a prettier, and
report differences as eslint issuesTry to remove eslint
, prettier
, and @tinkoff/eslint-config
internal dependencies from your project package.json
,
then reinstall dependencies.
"@tinkoff/eslint-config"
to extends section on config.{
"root": true,
"ignorePatterns": ["**/*"],
"extends": ["@tinkoff/eslint-config"]
// ...optionally some other configs
"overrides": [
{
"files": ["*.ts", "*.tsx"],
"parserOptions": {
"project": ["./tsconfig.base.json"]
}
}
]
}
Add "@tinkoff/eslint-config/app"
in extends section after root config
{
"extends": ["../../.eslintrc.json", "@tinkoff/eslint-config/app"],
"ignorePatterns": ["!**/*"]
...optionally some other configs
}
Add "@tinkoff/eslint-config/lib"
in extends section after root config
{
"extends": ["../../.eslintrc.json", "@tinkoff/eslint-config/lib"],
"ignorePatterns": ["!**/*"]
...optionally some other configs
}
Nx means usage .eslintrc.json
for configure ESLint. Just provide it! In .eslintrc.json
add extension of actual root config file:
{
"extends": ["./.eslintrc.js"]
}
After that:
import/no-unresolved
override rule in .eslintrc
of apps/libs that contains problem:
{
// ...some other configs...
// disable detection for packages starts with @tinkoff/
overrides: [
{
files: ['*.ts', '*.tsx', '*.js', '*.jsx'],
rules: {
'import/no-unresolved': [
'error',
{
ignore: ['^@tinkoff/'],
},
],
},
},
],
}
FAQs
ESLint configs to rule them all
The npm package @tinkoff/eslint-config receives a total of 392 weekly downloads. As such, @tinkoff/eslint-config popularity was classified as not popular.
We found that @tinkoff/eslint-config demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 17 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.