Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
babel-standard
Advanced tools
No decisions to make. No .eslintrc
, .jshintrc
, or .jscsrc
files to manage. It just
works.
This module saves you (and others!) time in two ways:
npm install babel-standard
(
or [
if (condition) { ... }
function name (arg) { ... }
self
– var self = this
window.self
usage is dissallowed (happens when var self = this
is
omitted)===
instead of ==
– but obj == null
is allowed to check null || undefined
.err
function parameterwindow
– except document
and navigator
are okay
open
, length
,
event
, and name
.babel-standard
a try today!To get a better idea, take a look at
a sample file written
in JavaScript Standard Style, or check out some of
the repositories that use
standard
.
Use this in one of your projects? Include one of these badges in your readme to let people know that your code is using the standard style.
[![js-standard-style](https://cdn.rawgit.com/feross/standard/master/badge.svg)](https://github.com/feross/standard)
[![js-standard-style](https://img.shields.io/badge/code%20style-standard-brightgreen.svg?style=flat)](https://github.com/feross/standard)
The easiest way to use JavaScript Standard Style to check your code is to install it
globally as a Node command line program. To do so, simply run the following command in
your terminal (flag -g
installs babel-standard
globally on your system, omit it if you want
to install in the current working directory):
npm install babel-standard -g
After you've done that you should be able to use the babel-standard
program. The simplest use
case would be checking the style of all JavaScript files in the current working directory:
$ babel-standard
Error: Use JavaScript Standard Style
lib/torrent.js:950:11: Expected '===' and instead saw '=='.
You can optionally pass in a directory using the glob pattern:
$ babel-standard src/util/**/*.js
Not compatible with babel-standard!
First, install standard
. Then, install the appropriate plugin for your editor:
let g:syntastic_javascript_checkers = ['standard']
to your .vimrc
.package.json
{
"name": "my-cool-package",
"devDependencies": {
"standard": "^3.0.0"
},
"scripts": {
"test": "standard && node my-tests.js"
}
}
npm test
$ npm test
Error: Use JavaScript Standard Style
lib/torrent.js:950:11: Expected '===' and instead saw '=='.
The beauty of JavaScript Standard Style is that it's simple. No one wants to maintain multiple hundred-line style configuration files for every module/project they work on. Enough of this madness!
This module saves you time in two ways:
Adopting standard
style means ranking the importance of code clarity and community
conventions higher than personal style. This might not make sense for 100% of projects and
development cultures, however open source can be a hostile place for newbies. Setting up
clear, automated contributor expectations makes a project healthier.
No. The the whole point of standard
is to avoid bikeshedding about
style. There are lots of debates online about tabs vs. spaces, etc. that will never be
resolved. These debates just distract from getting stuff done. At the end of the day you
have to 'just pick something', and that's the whole philosophy of standard
-- its a
bunch of sensible 'just pick something' opinions. Hopefully, users see the value in that
over defending their own opinions.
Of course it's not! The style laid out here is not affiliated with any official web
standards groups, which is why this repo is called feross/standard
and not
ECMA/standard
.
The word "standard" has more meanings than just "web standard" :-) For example:
Not compatible with babel-standard!
Yes! Just run standard --format filename.js
. This uses
Max Ogden's automatic formatter
standard-format
, which can automatically
fix most code issues.
While most issues can be fixed, some, like not handling errors in node-style callbacks, must be fixed manually.
The paths node_modules/**
, *.min.js
, bundle.js
, coverage/**
, and hidden
files/folders (beginning with .
) are automatically excluded when looking for .js
files
to style check.
Sometimes you need to ignore additional folders or specific minfied files. To do that, add
a standard.ignore
property to package.json
:
"standard": {
"ignore": [
"**/out/**",
"**/lib/select2/**",
"**/lib/ckeditor/**"
]
}
In rare cases, you'll need to break a rule and hide the warning generated by babel-standard
.
JavaScript Standard Style uses eslint
under-the-hood and you can
hide warnings as you normally would if you used eslint
directly.
To get verbose output (so you can find the particular rule name to ignore), run:
$ standard --verbose
Error: Use JavaScript Standard Style
routes/error.js:20:36: 'file' was used before it was defined. (no-use-before-define)
Disable all rules on a specific line:
file = 'I know what I am doing' // eslint-disable-line
Or, disable only the "no-use-before-define"
rule:
file = 'I know what I am doing' // eslint-disable-line no-use-before-define
Or, disable the "no-use-before-define"
rule for multiple lines:
/*eslint-disable no-use-before-define */
// offending code here...
// offending code here...
// offending code here...
/*eslint-enable no-use-before-define */
No. Use eslint
directly if you want to configure hundreds of options individually.
Pro tip: Just use standard
and move on. There are actual real problems that you could
spend your time solving! :P
Web workers have a magic global variable called self
. In regular JS files, babel-standard
won't let you use self
directly, as it wants to prevent accidental use of
window.self
. But babel-standard
has no way of knowing when you are in a worker
and
therefore does not know when to allow usage of self
directly.
Until we figure out a better solution, we recommend adding this to the top of workers:
/* global self */
This lets babel-standard
(as well as humans reading your code) know that self
is a global
in web worker code.
pre-commit
hook for babel-standard
?Funny you should ask!
#!/bin/sh
# Ensure all javascript files staged for commit pass standard code style
git diff --name-only --cached --relative | grep '\.js$' | xargs babel-standard
exit $?
Not compatible with babel-standard!
Alternatively, overcommit is a Git hook
manager that includes support for running standard
as a Git pre-commit hook.
To enable this, add the following to your .overcommit.yml
file:
PreCommit:
Standard:
enabled: true
MIT. Copyright (c) Feross Aboukhadijeh.
FAQs
JavaScript Standard Style with Babel
We found that babel-standard demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.