Security News
Input Validation Vulnerabilities Dominate MITRE's 2024 CWE Top 25 List
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
eslint-config-brigade
Advanced tools
This package provides Brigade's ESLint config (.eslintrc
) as an extensible shared config.
npm install --save-dev eslint-config-brigade
npm info "eslint-config-brigade@latest" peerDependencies
.eslintrc
, use the extends
feature:{
extends: 'eslint-config-brigade'
}
If you are using this in a project with React, extend the React configuration instead:
{
extends: 'eslint-config-brigade/react'
}
If you disagree with any of our rules, simply override them locally in the rules
section of your .eslintrc
. For example, to allow not using semi-colons:
{
rules: {
'semi': 0, // 0 for off, 1 to warn, 2 to error
}
}
Unlike many other configs, eslint-config-brigade
should have no issue being installed in a production (NODE_ENV=production
) environment.
eslint-config-brigade
breaks on npm2eslint-config-brigade
does NOT support npm2 and below. This is because npm3 changed the way the peerDependencie
s are handled compared to npm2, and we believe the npm2 implementation to sub-par, and supporting it requires package.json
"hacks" that we don't like. eslint-config-brigade
may work with npm2, but we offer no support if it does not.
NOTE: We have found that even if you are using npm2, you may be able to get the package to install properly if you use the yarn package manager instead. (We almost exclusively use yarn at Brigade; it is significantly faster than npm.)
FAQs
Brigade's ESLint configuration
The npm package eslint-config-brigade receives a total of 2 weekly downloads. As such, eslint-config-brigade popularity was classified as not popular.
We found that eslint-config-brigade demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.