eslint-config-secure
Advanced tools
Readme
An ESLint Shareable Config with generic static security analysis plugins.
This module checks for basic security issues in your Javascript. It includes plugins recommended by 18F, listed here.
Shareable configs are designed to work with the ESLint extends feature.
Learn more about Shareable Configs on the official ESLint website.
package.json file:
$ npm install --save-dev eslint eslint-config-secure
package.json file:{
"name": "my-super-package",
"eslintConfig": {
"extends": "secure"
}
"scripts": {
"lint": "./node_modules/.bin/eslint ."
}
}
You can override settings from this config by adding them directly to your .eslintrc or package.json file.
MIT. Copyright (c) Jeff Kohrman
FAQs
A shareable ESLint config with code security plugins
We found that eslint-config-secure demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
The Python Software Foundation has secured a 5-year sponsorship from Fastly that supports PSF's activities and events, most notably the security and reliability of the Python Package Index (PyPI).
Security News
LDAPjs, an LDAP Client and Server API for Node.js, was decommissioned after its maintainer received an abusive email from a user, raising concerns about this form of abuse as a potential attack vector.
Security News
CISA launched a new project called Vulnrichment to enrich CVEs with details that help prioritize patching and mitigation efforts, as the NVD backlog of unenriched CVEs awaiting analysis surpasses 10,000.