Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
eslint-config-onbrand-doelfke
Advanced tools
These are our settings for ESLint and Prettier
It's recommended you install this once per every project. ESLint used to have global configs, but no longer.
If you don't already have a package.json
file, create one with npm init -y
.
Then we need to install this config
npm install eslint-config-onbrand
package.json
, and add an eslintConfig
property. You can also create a new .eslintrc
or .eslintrc.js
file that lives where package.json does:in package.json, add this anywhere top level. Like right under your "scripts" object.
"eslintConfig": {
"extends": ["onbrand"]
}
Or put this in a .eslintrc
file
{
"extends": ["onbrand"]
}
For TypeScript projects, use onbrand/typescript
.
{
"extends": ["onbrand/typescript"]
}
"scripts": {
"lint": "eslint .",
"lint:fix": "eslint . --fix"
},
npm run lint
and fix all fixable issues with npm run lint:fix
. You probably want your editor to do this though.If needed, to overwrite eslint or prettier settings, you can add the rules in your .eslintrc
file. The ESLint rules go directly under "rules"
.
{
"extends": [
"onbrand"
],
"rules": {
"no-console": 2,
}
}
If you want custom prettier options, add a .prettierrc
file in the root directory and override any of the preset values:
{
"endOfLine": "auto",
"trailingComma": "all",
"tabWidth": 2,
"semi": true,
"singleQuote": false,
"bracketSpacing": false,
"arrowParens": "always",
}
You can also put this in the EsLint config as a rule like so:
{
"extends": ["onbrand"],
"rules": {
... any eslint rules here
"prettier/prettier": [
"error",
{
"endOfLine": "auto",
"tabWidth": 4
},
],
}
}
You should read this entire thing. Serious!
Once you have done one, or both, of the above installs. You probably want your editor to lint and fix for you. Here are the instructions for VS Code:
Code/File
→ Preferences
→ Settings
. It's easier to enter these settings while editing the settings.json
file, so click the Open (Open Settings) icon in the top right corner:// These are all my auto-save configs
"editor.formatOnSave": true,
// turn it off for JS and JSX, we will do this via eslint
"[javascript][javascriptreact][typescript][typescriptreact]": {
"editor.formatOnSave": false
},
// show eslint icon at bottom toolbar
"eslint.alwaysShowStatus": true,
// tell the ESLint plugin to run on save
"editor.codeActionsOnSave": {
"source.fixAll": true
}
After attempting to lint your file for the first time, you may need to click on 'ESLint' in the bottom right and select 'Allow Everywhere' in the alert window.
Finally you'll usually need to restart VS code. They say you don't need to, but it's never worked for me until I restart.
Same instructions as above, just make sure you extend onbrand/typescript
instead of just onbrand
.
If you experience issues with ESLint not formatting the code or you receive a Parsing error: Cannot find module '@babel/preset-react
error message then you need to check that you opened the folder where you installed and configured ESLint directly in VS Code. The correct folder to open will be the one where you installed the eslint-config-onbrand
npm package and where you created the .eslintrc
file.
Opening a parent folder or child folder in your code editor will cause ESLint to fail in finding the ESLint npm packages and the formatting won't work.
your-username
|
projects
|
beginner-javascript # <- Open this folder directly in your code editor
.eslintrc
package.json
node_modules/
exercises/
playground/
FAQs
ESLint with Prettier Config for OnBrand
The npm package eslint-config-onbrand-doelfke receives a total of 0 weekly downloads. As such, eslint-config-onbrand-doelfke popularity was classified as not popular.
We found that eslint-config-onbrand-doelfke demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.