
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
eslint-config-flowtype-strict
Advanced tools
Shareable ESLint config for eslint-plugin-flowtype: recommended + more rules.
ESLint shareable config for eslint-plugin-flowtype: recommended + more rules.
In addition to plugin:flowtype/recommended, the following rules are in effect:
Example of valid code:
// @flow
import React, { Component } from "react";
type InputEvent = SyntheticInputEvent<HTMLInputElement>;
type ActivatorProps = {|
what: string,
onClick: (event: InputEvent) => void
|};
class Activator extends Component<AppProps, {}> {
render() {
const { what, onClick } = this.props;
return <button onclick={onClick}>Activate {what}</button>;
}
}
Example of invalid code:
/* @flow */ // <-- flowtype/require-valid-file-annotation
type ActivatorProps = { // <-- flowtype/require-exact-type
what: string,
onClick: function, // <-- flowtype/no-weak-types
};
See the full config for more details.
Prerequisites:
Important: please note ESLint, babel-eslint and eslint-plugin-flowtype need to be installed alongside this module. Latest versions are recommended. This is because this module uses peer dependencies to be more flexible. For Node 4 and 5, use
eslint@4
andbabel-eslint@8
.
npm install --save-dev eslint
npm install --save-dev babel-eslint
npm install --save-dev eslint-plugin-flowtype
npm install --save-dev eslint-config-flowtype-strict
Add this to your .eslintrc.json
:
{
"extends": ["flowtype-strict"]
}
Please read guidelines for contributing.
Note: this ESLint config was created using eslint-config-template.
FAQs
Shareable ESLint config for eslint-plugin-flowtype: recommended + more rules.
The npm package eslint-config-flowtype-strict receives a total of 0 weekly downloads. As such, eslint-config-flowtype-strict popularity was classified as not popular.
We found that eslint-config-flowtype-strict demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.