Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
eslint-config-standard-warn
Advanced tools
ESLint Sharable Config Based on Standard, with All Errors Changed to Warnings
This config extends JavaScript Standard Style and changes all errors to warnings. This makes it easier to add ESLint to an existing project by allowing you to find out where your problems are without breaking your tests. You can then use a tool like ESLint Nibble to fix the warnings one-by-one as you have the time and/or willpower. Once all your rules are passing, switch over to using the original Standard configuration.
npm install eslint-config-standard-warn
Shareable configs are designed to work with the extends
feature of .eslintrc
files.
You can learn more about
Shareable Configs on the
official ESLint website.
To use the JavaScript Standard Style Warn shareable config, first run this:
npm install eslint-config-standard-warn
Then, add this to your .eslintrc file:
{
"extends": "standard-warn"
}
Note: We omitted the eslint-config-
prefix since it is automatically assumed by ESLint.
You can override settings from the shareable config by adding them directly into your
.eslintrc
file.
FAQs
ESLint Sharable Config Based on Standard, with All Errors Changed to Warnings
The npm package eslint-config-standard-warn receives a total of 2 weekly downloads. As such, eslint-config-standard-warn popularity was classified as not popular.
We found that eslint-config-standard-warn demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.