Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
@wagtail/eslint-config-wagtail
Advanced tools
Shareable ESLint config for Wagtail, based on airbnb/javascript
Shareable ESLint config for Wagtail, based on airbnb/javascript.
The package provides Wagtail's .eslintrc as an extensible shared config.
Our default export contains all of our ESLint rules, including Airbnb's config
(which has ECMAScript 6 and React). It requires eslint
, as well as the configuration’s peer dependencies.
# npm v7:
npm install --save-dev @wagtail/eslint-config-wagtail@latest
# npm v6 and below:
npx install-peerdeps --dev @wagtail/eslint-config-wagtail@latest
nvm install
to ensure you have the correct Node versionnpm install
to install project dependenciesnvm use
to set Node to the correct versionnpm run test
npm run lint
npm run preflight
index.js
file, not the .eslintrc
file as it is for local linting onlyv0.4.0 - 2021-12-23)
There are a number of existing rules that are now enforced:
**
over Math.pow
)And brand new rules introduced with this release:
This release updates most of the dependencies of the config:
| package | from | to | | ------------------------- | ------- | ------- | | eslint | ^7.2.0 | ^8.2.0 | | eslint-config-airbnb | ^18.2.1 | ^19.0.2 | | eslint-config-prettier | | ^8.3.0 | | eslint-plugin-react | ^7.24.0 | ^7.27.1 | | eslint-plugin-react-hooks | ^4.2.0 | ^4.3.0 | | eslint-plugin-jsx-a11y | ^6.4.1 | ^6.5.1 | | eslint-plugin-import | ^2.23.4 | ^2.25.3 |
Users of npm v7 can npm install --save-dev @wagtail/eslint-config-wagtail@latest
and this will automatically install all required peer dependencies.
For older versions of npm, use npx install-peerdeps --dev @wagtail/eslint-config-wagtail@latest
so all other peerDependencies are updated as well.
FAQs
Shareable ESLint config for Wagtail, based on airbnb/javascript
The npm package @wagtail/eslint-config-wagtail receives a total of 273 weekly downloads. As such, @wagtail/eslint-config-wagtail popularity was classified as not popular.
We found that @wagtail/eslint-config-wagtail demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.