
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@veriff/eslint-config
Advanced tools
This package includes different ESLint configurations that enforce code style rules and best practices for JavaScript, TypeScript, and React projects.
At first, install eslint
and the package:
npm i -D eslint @veriff/eslint-config
There are 5 different configuration for different type of projects:
base
– plain TypeScriptbase-javascript
– plain JavaScriptreact
– React / TypeScriptreact-javascript
– React / JavaScriptjest
– Jesttesting-library
– Testing library for ReactTo apply the configuration you need to add create a .eslintrc.json
file in the root with the following contents:
{
"extends": [
"@veriff/eslint-config/<config-name>"
]
}
For TypeScript-based projects you also must provide a path to tsconfig.json
to make ESLint understand the project
better:
{
"extends": [
"@veriff/eslint-config/<config-name>"
],
"parserOptions": {
"project": "path/to/tsconfig.json"
}
}
For example, the React / TypeScript application with tests (Jets + testing-library) with tsconfig.json
in the root
should have the following ESLint configuration:
{
"extends": [
"@veriff/eslint-config/react",
"@veriff/eslint-config/jest",
"@veriff/eslint-config/testing-library"
],
"parserOptions": {
"project": "./tsconfig.json"
}
}
Or the Node.js plain JavaScript application with tests should have the following configuration:
{
"extends": [
"@veriff/eslint-config/base-javascript",
"@veriff/eslint-config/jest"
]
}
Considering the code style is pretty strict, it might be hard to migrate to it right away. So there are minimal versions of the configs that include only essential best practices and prevent common issues (basically, they just don't have Airbnb):
base-minimal
– plain TypeScriptbase-javascript-minimal
– plain JavaScriptreact-minimal
- React / TypeScriptreact-javascript-minimal
– React / JavascriptThese configs are not permanent and exposed only for simplifying the migration process. They will be deprecated in the next major release.
FAQs
Shared ESLint configurations.
The npm package @veriff/eslint-config receives a total of 403 weekly downloads. As such, @veriff/eslint-config popularity was classified as not popular.
We found that @veriff/eslint-config demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.