
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
eslint-config-plus-prettier
Advanced tools
Standard config for ESLint, Prettier and Package Lint. Also includes an optional TSConfig.
Standard config for ESLint, Prettier and Package Lint. Also includes an optional TSConfig.
npm install --save-dev eslint-config-plus-prettier
Add the following scripts to your package.json
:
"scripts": {
"format": "prettier --write .",
"format:check": "prettier --check .",
"lint": "eslint . --ext .ts,.js --fix",
"lint:check": "eslint . --ext .ts,.js",
"package:lint": "npx npm-package-json-lint ."
}
Add a .eslintrc.json
file with the following:
{
"extends": "eslint-config-plus-prettier"
}
Consider adding a .eslintignore
file to avoid trying to lint compiled code in the dist
folder:
dist
Add prettier config to package.json
:
"prettier": "eslint-config-plus-prettier/.prettierrc.json"
Consider adding a .prettierignore
file to avoid formatting generated files:
package-lock.json
CHANGELOG.md
Add a .npmpackagejsonlintrc.json
file with the following:
{
"extends": "eslint-config-plus-prettier/.npmpackagejsonlintrc.json"
}
Add a tsconfig.json
file with the following:
{
"extends": "eslint-config-plus-prettier/tsconfig.json",
"include": ["src"], // Files to be compiled
"compilerOptions": {
"outDir": "dist" // Compiled directory
}
}
npm run lint
npm run format
npm run package:lint
lint
will check for errors and fix formatting in .ts
and .js
files.format
will apply format rules to all possible files.package:lint
will warn of any inconsistencies in the package.json
file.FAQs
Standard config for ESLint, Prettier and Package Lint. Also includes an optional TSConfig.
The npm package eslint-config-plus-prettier receives a total of 81 weekly downloads. As such, eslint-config-plus-prettier popularity was classified as not popular.
We found that eslint-config-plus-prettier demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.