Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
eslint-config-brightspace
Advanced tools
Common Brightspace eslint configs.
npm install eslint-config-brightspace
Simply specify the extends
property in the .eslintrc
file as shown below. Note: omit the "eslint-config" when specifying the module, since eslint assumes it.
Specify the extends
property in the .eslintrc.json
file:
{
"extends": "brightspace"
}
Specify the desired config for the extends
property:
browser-config
: sets up browser globalslit-config
: sets up env for browser globals and lit rules for lit elementsnode-config
: sets up node globals including es6 env featuresreact-config
: sets up env for jsx and es6, including globals for jestopen-wc-testing-config
: sets up env for @open-wc/testingpolymer-config
: sets up env for browser globals and polymer web componentspolymer-3-config
: sets up env for browser globals and polymer web components for polymer 3wct-config
: sets up env for web component tester testswct-polymer-3-config
: sets up env for web component tester tests for polymer 3{
"extends": "brightspace/react-config"
}
To use react-config
, consumers should install the eslint-plugin-react plugin to enable use of the rules it provides.
To use polymer-config
, consumers should install the eslint-plugin-html plugin to extract and lint JavaScript contained in .html
web component files. eslint-plugin-sort-class-members plugin is required to ensure consistency in class format
To use lit-config
, consumers should install the eslint-plugin-html, eslint-plugin-sort-class-members, and eslint-plugin-lit plugins.
See the eslint rules for more details on rule configuration. See the eslint shareable configs for more details on creating configs.
Contributions are welcome, please submit a pull request!
This repository is configured with EditorConfig rules and contributions should make use of them.
TL;DR: Commits prefixed with
fix:
andfeat:
will trigger patch and minor releases when merged tomaster
. Read on for more details...
The sematic-release GitHub Action is called from the release.yml
GitHub Action workflow to handle version changes and releasing.
All version changes should obey semantic versioning rules:
The next version number will be determined from the commit messages since the previous release. Our semantic-release configuration uses the Angular convention when analyzing commits:
fix:
or perf:
will trigger a patch
release. Example: fix: validate input before using
feat:
will trigger a minor
release. Example: feat: add toggle() method
BREAKING CHANGE:
with a space or two newlines in the footer of the commit messagebuild:
, ci:
, docs:
, style:
, refactor:
and test:
. Example: docs: adding README for new component
To revert a change, add the revert:
prefix to the original commit message. This will cause the reverted change to be omitted from the release notes. Example: revert: fix: validate input before using
.
When a release is triggered, it will:
package.json
Occasionally you'll want to backport a feature or bug fix to an older release. semantic-release
refers to these as maintenance branches.
Maintenance branch names should be of the form: +([0-9])?(.{+([0-9]),x}).x
.
Regular expressions are complicated, but this essentially means branch names should look like:
1.15.x
for patch releases on top of the 1.15
release (after version 1.16
exists)2.x
for feature releases on top of the 2
release (after version 3
exists)FAQs
Common Brightspace eslint configs.
The npm package eslint-config-brightspace receives a total of 2,531 weekly downloads. As such, eslint-config-brightspace popularity was classified as popular.
We found that eslint-config-brightspace demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.