
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
cspell-check-unused-words
Advanced tools
A command line tool to check for unused words in the cspell.json file
cspell-check-unused-words
is a helper program for people who use CSpell. It will check your CSpell configuration file for unused words. You can use it in your project's linting pipeline to ensure that your project does not have any "orphaned" words.
Type the following command while in the root of your project:
npm install cspell-check-unused-words --save-dev
Type the following command while in the root of your project:
npx cspell-check-unused-words
CSpell is a fantastic tool that allows you to spell check your code. When using the CSpell VSCode extension, a blue squiggly line will appear underneath words that are misspelled.
Sometimes, these blue squiggly lines are false positives. When this is the case, you can right-click on the word and select "Spelling" --> "Add Words to CSpell Configuration". Doing this will automatically insert a new entry in your CSpell configuration file (which is usually something like "cspell.json").
Over time, the word ignore list in your configuration file will become quite large. But because of code changes, not all of the words may still serve a purpose. For example, the original code that caused a spelling error might have been removed or changed. In order to clean up your words, you need to audit every word to see if it is still being used.
cspell-check-unused-words
does exactly this.
boolean
false
If any unused words are found, the program will attempt to automatically remove them from the CSpell configuration file. If used, this option will change the exit code to always be 0.
boolean
false
The default output is "The following word in the CSpell config is not being used: foo". If this flag is used, then only the names of the unused words will be printed out.
boolean
false
Enables more verbose logging, which is useful to see what the tool is doing at a closer level or for troubleshooting things when the tool is not working correctly.
string
process.cwd()
By default, this tool will use the current working directory as a jumpoff point to look for the CSpell configuration and launch the CSpell lint run. You can use this option to specify the full path to a different directory as the jumpoff point.
FAQs
A command line tool to check for unused words in the cspell.json file
The npm package cspell-check-unused-words receives a total of 1,511 weekly downloads. As such, cspell-check-unused-words popularity was classified as popular.
We found that cspell-check-unused-words demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.