Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
create-react-linters
Advanced tools
Setup all linters you like and don't let 💩 slip into your code base!
Eslint | Stylelint | Commitlint | Prettier | EditorConfig | Commitizen
Prerequisites:
^12.22.0
, ^14.17.0
, or >=16.0.0
)git
and package.json
npx create-react-linters@latest
Find and fix problems in your JavaScript code.
we are extending airbnb
configurations. no extra rules are added.
Typescript Only
Typescript Only
Typescript Only
npm run eslint:check
npm run eslint:fix
A mighty, modern linter that helps you avoid errors and enforce conventions in your styles.
we are extending standard
configurations. no extra rules are added.
SCSS/SASS Only
npm run stylelint:check
npm run stylelint:fix
Helps your team adhering to a commit convention. By supporting npm-installed configurations it makes sharing of commit conventions easy.
we are extending config-conventional
configurations. no extra rules are added.\
Learn more about conventional commits. here
An opinionated code formatter
.prettierrc.json
is created with some configurations, feel free to update them.\
Learn more about prettier options. here
if.eslintrc.json found
if.eslintrc.json found
if.stylelintrc.json found
if.stylelintrc.json found
npm run prettier:check
npm run prettier:fix
Maintain consistent coding styles for multiple developers working on the same project across various editors and IDEs.
Default .editorconfig
generated file is used\
When you commit with Commitizen, you'll be prompted to fill out any required commit fields at commit time.\
npm run commit
Run linters against staged git files and don't let 💩 slip into your code base!\
pre-commit | eslint, stylelint and prettier commit | commitlint
FAQs
setup all linters you like for your react app in 1 minute 🚀
We found that create-react-linters demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.