Security News
JSR Working Group Kicks Off with Ambitious Roadmap and Plans for Open Governance
At its inaugural meeting, the JSR Working Group outlined plans for an open governance model and a roadmap to enhance JavaScript package management.
eslint-config-civicsource
Advanced tools
Shareable ESLint configuration to be used in CivicSource client applications
Shareable ESLint configuration to be used in CivicSource client applications
Read more in general about how eslint shareable configurations work.
npm install eslint-config-civicsource --save-dev
Add to your .eslintrc.yml
:
extends:
- civicsource
You could also choose to only import the style rules:
extends:
- civicsource/style
or only the react rules:
extends:
- civicsource/react
or only the flow rules:
extends:
- civicsource/flow
or a mixture.
When adding rules or plugins, put them into the correct js file based on category (e.g. add react rules to react.js
). Make sure to add a small comment explaining what the rule does (feel free to be as snarky as possible) along with a link to the rule documentation.
When making changes, be sure to follow semantic versioning.
FAQs
Shareable ESLint configuration to used in CivicSource client applications
The npm package eslint-config-civicsource receives a total of 4 weekly downloads. As such, eslint-config-civicsource popularity was classified as not popular.
We found that eslint-config-civicsource demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
At its inaugural meeting, the JSR Working Group outlined plans for an open governance model and a roadmap to enhance JavaScript package management.
Security News
Research
An advanced npm supply chain attack is leveraging Ethereum smart contracts for decentralized, persistent malware control, evading traditional defenses.
Security News
Research
Attackers are impersonating Sindre Sorhus on npm with a fake 'chalk-node' package containing a malicious backdoor to compromise developers' projects.