Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
eslint-config-valorsoft
Advanced tools
env:"node"
and disable newline-per-chained-call
rulenpm
$(sudo) npm install -g npm@latest
eslint
to package.json
script
section
"eslint": "./node_modules/.bin/eslint --ignore-path .gitignore --ext js --fix . .config",
scripts
package.json
section
"test": "npm run eslint && ..."
.eslintrc.json
near to you package.json
with the following content
{
"extends": "./node_modules/eslint-config-valorsoft/.eslintrc.json",
"env": {
"node": true
}
}
npm t
to check that all is working correctlyno-eq-null
- duplicates eqeqeq:smart
no-restricted-imports
, no-restricted-modules
, no-restricted-globals
- dependant on project requirementsid-match
- not found any particular use of this rule, camelCase
is enoughjsx-quotes
- I don't use jsx so I don't careno-plusplus
- why not ++
? It's nice to use when you know what you are doingno-restricted-syntax
- duplicates no-with
and disabled functional expressionsno-ternary
- why not? but not nested ternary pleaserequire-jsdoc
- nice thing, but hard to followspaced-comment
- nice for meaningful comments, bad for quick code commentingwrap-regex
- no needprefer-reflect
- compatibility is to low to usenewline-before-return
- TBDindent
- 2 spaces rulezzz!max-len
- extended to 120 charsnewline-per-chained-call
- extended ignoreChainWithDepth
to 3eqeqeq
- smart
mode enableddot-location
- property
mode enabledno-implicit-coercion
- boolean implicit coercion enabledfunc-style
- declaration
only pleaseno-use-before-define
- usage of function
before declarations are allowedno-mixed-requires
- grouping
and allowCall
checks enabledlinebreak-style
- unix onlyone-var
- never
use one var|let|const
per blockpadded-blocks
- never
add useless paddingquote-props
- quote properties only as-needed
and keywords
no-magic-numbers
- ignore
-1,0,1
as most often used numbers and ignoreArrayIndexes
, enforceConst
are enabledFAQs
Valor Software's ESLint config, following our styleguide
The npm package eslint-config-valorsoft receives a total of 5 weekly downloads. As such, eslint-config-valorsoft popularity was classified as not popular.
We found that eslint-config-valorsoft demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.