
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
eslint-config-earnest-es7
Advanced tools
Earnest's ESLint config for ES7
Install the following "devDependencies"
in your repo:
npm install eslint-config-earnest-es7@latest babel-core babel-cli babel-eslint babel-preset-es2015 babel-preset-stage-3 eslint eslint-plugin-babel --save-dev
Add a root level .eslintrc
that references this package
echo '{ "extends": "earnest-es7" }' > .eslintrc
Add another .eslintrc
to your test
folder that supports mocha
echo '{\n\s\s"extends": "earnest-es7"\n}' > test/.eslintrc
(Recommended) Add the following entries to your package.json
for simplified CLI access to linting:
"scripts": {
"lint": "./node_modules/.bin/eslint .",
"lint-changed": "git diff --name-only --cached --relative | grep '\\.js$' | xargs ./node_modules/.bin/eslint"
}
(Recommended) Setup your editor to support inline ESLint support. For Sublime Text, that means npm install -g eslint
then installing SublimeLinter
and SublimeLinter-contrib-eslint
packages. For Vim, use Syntastic.
In order to run linting against this repository, you must create a self-referential link to this module:
npm install
npm link
npm link eslint-config-earnest-es7
npm run lint
FAQs
Earnest's ESLint config for ES7
The npm package eslint-config-earnest-es7 receives a total of 2 weekly downloads. As such, eslint-config-earnest-es7 popularity was classified as not popular.
We found that eslint-config-earnest-es7 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.