Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
eslint-config-nrk
Advanced tools
A shared ESLint configuration for and by JavaScript developers at NRK.
A shared ESLint configuration for and by JavaScript developers at NRK.
Get started by running this command in the root of your project (npm
is also supported):
yarn add eslint eslint-config-nrk --dev
Then add an .eslintrc.json
file to the root of your project (see Documentation below) before running the eslint
command, with the following:
{
"extends": [
"nrk"
]
}
NOTE: eslint
plugins are available for most modern text editors, like Atom, emacs, vim, Sublime Text, etc.
eslint
is configured by adding an .eslintrc.json
file to the root of a project where env
and extends
are specified. Refer to the eslint
documentation for more configuration options.
The following example shows a typical setup for linting both browser and Node.js (CommonJS) code:
{
"env": {
"browser": true,
"node": true
},
"extends": [
"nrk"
]
}
For supporting React projects, also add the nrk/rules/react
extension:
{
"env": {
"browser": true,
"node": true
},
"extends": [
"nrk",
"nrk/rules/react"
]
}
Then install eslint-plugin-react
:
yarn add eslint-plugin-react --dev
For supporting JSX, also add the nrk/rules/jsx
extension:
{
"env": {
"browser": true,
"node": true
},
"extends": [
"nrk",
"nrk/rules/react",
"nrk/rules/jsx"
]
}
It is necessary to configure eslint
to lint files matching the .jsx
extension:
eslint . --ext=.js,.jsx
Please note that the nrk/rules/jsx
configuration is always using the latest version of React. When using an older version, please refer to the eslint-plugin-react
documentation.
This configuration is available as a way of migrating to a more modern codebase (recommended).
{
"env": {
"browser": true,
"node": true
},
"extends": [
"nrk/es5"
]
}
FAQs
A shared ESLint configuration for and by JavaScript developers at NRK.
The npm package eslint-config-nrk receives a total of 15 weekly downloads. As such, eslint-config-nrk popularity was classified as not popular.
We found that eslint-config-nrk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.