Security News
Research
Supply Chain Attack on Rspack npm Packages Injects Cryptojacking Malware
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
@xrplf/eslint-config
Advanced tools
The XRPL Foundation's base TypeScript ESLint config, following our styleguide
@xrplf/eslint-config
A super-strict TypeScript linting configuration for enforcing best practices.
First, install the needed development dependencies:
# Ensure TypeScript and the TS ESLint parser are installed
npm install --save-dev typescript @typescript-eslint/parser
# Ensure ESLint & Prettier are installed
npm install --save-dev eslint prettier
# Install plugins used by @xrplf/eslint-config
npm install --save-dev @typescript-eslint/eslint-plugin eslint-plugin-import eslint-plugin-prettier eslint-plugin-jsdoc eslint-plugin-tsdoc eslint-plugin-array-func eslint-plugin-eslint-comments eslint-plugin-node
# Install the Xpring ESLint config
npm install --save-dev @xrplf/eslint-config
Then, configure your ESLint to use the Xpring configuration. An example ESLint configuration is provided below:
module.exports = {
root: true,
// Make ESLint compatible with TypeScript
parser: '@typescript-eslint/parser',
parserOptions: {
// Enable linting rules with type information from our tsconfig
tsconfigRootDir: __dirname,
project: ['./tsconfig.json'],
// Allow the use of imports / ES modules
sourceType: 'module',
ecmaFeatures: {
// Enable global strict mode
impliedStrict: true,
},
},
// Specify global variables that are predefined
env: {
node: true, // Enable node global variables & Node.js scoping
es2020: true, // Add all ECMAScript 2020 globals and automatically set the ecmaVersion parser option to ES2020
},
plugins: [],
extends: ['@xrplf'],
rules: {},
overrides: [],
}
We provide four different configurations.
The main configuration is strict and assumes that the project you're
linting uses React. This is @xrplf/eslint-config
, or @xrplf
for short.
If you're not using React but still want strict checking you can use
@xrplf/eslint-config/base
.
If you need a looser rule set for the purpose of transitioning onto the
strict rules and are using React you can use @xrplf/eslint-config/loose
.
Finally, if you need the looser rule set and are not using react you can
use @xrplf/eslint-config/loose-base
.
The looser configuration differs in the following ways:
no-unsafe-*
rules from @typescript-eslint
are disabledFAQs
The XRPL Foundation's base TypeScript ESLint config, following our styleguide
The npm package @xrplf/eslint-config receives a total of 159 weekly downloads. As such, @xrplf/eslint-config popularity was classified as not popular.
We found that @xrplf/eslint-config demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.
Security News
Sonar’s acquisition of Tidelift highlights a growing industry shift toward sustainable open source funding, addressing maintainer burnout and critical software dependencies.