
Research
Security News
Malicious npm Package Wipes Codebases with Remote Trigger
A malicious npm typosquat uses remote commands to silently delete entire project directories after a single mistyped install.
eslint-config-eventbrite
Advanced tools
Eventbrites's base ESLint config that lints ES6+/ES2015+ and adheres to the Eventbrite JavaScript Coding Style Guide
Eventbrite's base ESLint config that lints ES6+/ES2015+ and adheres to the Eventbrite JavaScript Coding Style Guide.
This ESLint configuration requires eslint
, babel-eslint
, eslint-plugin-babel
, eslint-plugin-import
, and eslint-plugin-jest
.
Install using npm:
npm install --save-dev eslint@^4.19.1 babel-eslint@^8.2.3 eslint-plugin-babel@^5.1.0 eslint-plugin-import@^2.11.0 eslint-plugin-jest@^21.15.1 eslint-config-eventbrite
...or using yarn:
yarn add --dev eslint@^4.19.1 babel-eslint@^8.2.3 eslint-plugin-babel@^5.1.0 eslint-plugin-import@^2.11.0 eslint-plugin-jest@^21.15.1 eslint-config-eventbrite
Extend eslint-config-eventbrite
in your .eslintrc.json
:
{
"extends": "eventbrite"
}
NOTE: This configuration extends eslint-config-eventbrite-legacy
and plugin:import/errors
.
Thank you for your willingness to contribute! 😀
Although eslint-config-eventbrite
is a public package, its primary purpose is for linting Eventbrite's JavaScript code. Therefore, it is unlikely that we'll accept changes to rules as they may adversely affect the linting of our own code. However, we do welcome fixes for errors or additions for omissions.
If you are uncertain as to whether your suggestion qualifies, go ahead and submit a Pull Request and we'll let you know. Thanks again!
The library is available as open source under the terms of the MIT License.
Many thanks to Airbnb and their example eslint-config-airbnb
.
FAQs
Eventbrites's base ESLint config that lints ES6+/ES2015+ and adheres to the Eventbrite JavaScript Coding Style Guide
We found that eslint-config-eventbrite demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm typosquat uses remote commands to silently delete entire project directories after a single mistyped install.
Research
Security News
Malicious PyPI package semantic-types steals Solana private keys via transitive dependency installs using monkey patching and blockchain exfiltration.
Security News
New CNA status enables OpenJS Foundation to assign CVEs for security vulnerabilities in projects like ESLint, Fastify, Electron, and others, while leaving disclosure responsibility with individual maintainers.