
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
eslint-config-pipedrive
Advanced tools
Pipedrive specific linting configurations for JavaScript projects
This is a shared config for ESLint that is based in Pipedrive internal coding standards. It is mainly intended to be used with the internal node-hooks library, but can be used completely separately as well.
Table of Contents
Install Pipedrive shared config:
npm install --save-dev eslint
npm install --save-dev eslint-config-pipedrive
All you really need to configure is the flavour of the configuration package. You use the rules by extending the shared config:
{
"extends": ["pipedrive"]
}
There are essentially 6 rulesets that you can extend:
"pipedrive"
(or "pipedrive/es9"
): Default ES9 (ES2018) based rules for Pipedrive"pipedrive/es5"
: ES5 specific rules for Pipedrive"pipedrive/es6"
: ES6 (ES2015) specific rules for Pipedrive"pipedrive/es8"
: ES8 (ES2017) specific rules for Pipedrive"pipedrive/es9"
: ES9 (ES2018) specific rules for Pipedrive"pipedrive/react"
: React specific rules for Pipedrive"pipedrive/typescript"
: Typescript specific rules for PipedriveUsing React rules also requires additional ESLint plugin for the rules to work. To install dependency:
npm install --save-dev eslint-plugin-react
If you want to enable rules for React Hooks project, you must also install
the react-hooks
eslint module:
npm install --save-dev eslint-plugin-react-hooks
Using Typescript rules also requires a few specific Typescript plugins for ESLint. Install dependencies:
npm install --save-dev @typescript-eslint/eslint-plugin @typescript-eslint/parser
Install dependencies:
npm install --save-dev prettier eslint-config-prettier @pipedrive/prettier-config
Create your .eslintrc.json
:
{
"extends": ["pipedrive", "prettier"]
}
Create your .prettierrc.js
file:
module.exports = require('@pipedrive/prettier-config');
Add Prettier to your pre-commit hook
verify-staged
will automatically run Prettier:{
"scripts": {
"verify-staged": "bin/verify-staged.sh"
},
"pre-commit": ["verify-staged", "npm-version-check"]
}
package.json
, which you can use to format whole project with prettier:{
"scripts": {
"format": "npx prettier . --write"
},
"pre-commit": ["format", "lint", "test", "npm-version-check"]
}
When using VS Code, make sure you have the esbenp.prettier-vscode
plugin installed and set the settings properly.
{
// Format using Prettier
"editor.defaultFormatter": "esbenp.prettier-vscode",
// Fix eslint errors on save
"editor.codeActionsOnSave": {
"source.fixAll.eslint": true
}
}
The rules are defined by the Pipedrive developer community. So if there are some new rules that should be added, or would make things better, submit the new issue and fill in the details.
After submitting the issue, post the issue in an appropriate public channel. Voting happens with simple :+1: / :-1: system. And if there is enough interest in the change, it will be adopted.
FAQs
Pipedrive specific linting configurations for JavaScript projects
The npm package eslint-config-pipedrive receives a total of 6,344 weekly downloads. As such, eslint-config-pipedrive popularity was classified as popular.
We found that eslint-config-pipedrive demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.