
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
ec0lint-plugin-html
Advanced tools

Website | Configuring | Rules
ec0lint is a static code analysis tool that provides users with hints on how to reduce the carbon footprint of their websites during the development process. Applying code changes suggested by ec0lint results in lower carbon emissions per visit, quicker loading and higher space efficiency. The tool is open-source and community-driven.
Did you know that more than 250 000 websites are published every day?
The majority uses too heavy fonts, too large/unnecessary images or utilises redundant libraries. These and other factors generate the carbon footprint. Actually, one view of an average website emits 1.8 g CO2 which sums up to 216 kg CO2 annually. Unfortunately, current solutions optimise only already existing websites.
ec0lint is a tool for frontend developers that mitigates the carbon footprint of websites. It shows tips advising how to create a more climate-friendly code. Thanks to code optimization ec0lint can help in reducing CO2 emissions per one view from 1.8 g to ~0.2 g saving 198 kg CO2 (-88%!) annually.
The tool is customized and each rule applied during the analysis can be adjusted, or treated as hints rather than errors. This flexibility allows the developers to reach their goals without interruptions from ec0lint, at the same time drawing attention to possible improvements.
Make sure you have Node installed
(a) If your code contains CSS files
Download ec0lint:
npm i ec0lint ec0lint-style ec0lint-style-config-recommended
Configure your project:
npm init @ec0lint/config
Create a .ec0lint-stylerc.json configuration file in the root of your project with the following content:
{ "extends": "ec0lint-style-config-recommended" }
Split your terminal and run:
npx ec0lint-style "**/*.css" npx ec0lint .
(b) If your code contains LESS, SASS/SCSS files
npm i ec0lint ec0lint-style ec0lint-style-config-recommended-scss
Configure your project:
npm init @ec0lint/config
Create a .ec0lint-stylerc.json configuration file in the root of your project with the following content:
{ "extends": "ec0lint-style-config-recommended-scss" }
Split your terminal and run:
npx ec0lint-style "**/*.scss" npx ec0lint .
Let's build an eco-friendly website!
:white_check_mark: v1.0.0 - June - MVP
:white_check_mark: v2.0.0 - October - CO2 modules + React plugin
:white_check_mark: v2.1.0 - January - 20 rule implementations, 15 unique rules
:hammer: v3.0.0 - March - IDE plugins + resources scanning
:lock: v4.0.0 - June - TypeScript plugin
:lock: v5.0.0 - September - CI/CD report
Next:
Legend:
If you wish to contribute, just write to us and start coding!
You can look at tasks marked as :four_leaf_clover: or at our issues (https://github.com/ec0lint/ec0lint/issues) and search for a task for you.
Thank you!
We are open to collaboration on improving ec0lint, and we are very grateful for all contributions and feedback on the tool. Thank you for creating sustainable digital environment with us!
Conctact: ec0lint@tutanota.com
FAQs
Ec0lint plugin for html
The npm package ec0lint-plugin-html receives a total of 9 weekly downloads. As such, ec0lint-plugin-html popularity was classified as not popular.
We found that ec0lint-plugin-html demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.