Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
eslint-config-videojs
Advanced tools
An ESLint Shareable Config for video.js Standard Style.
This package is for advanced users. If you only want the video.js Standard Style program to check your code, use that instead!
Lead Maintainer: Pat O'Neill @misteroneill
Maintenance Status: Stable
npm install eslint-config-videojs
Shareable configs are designed to work with the extends
feature of .eslintrc
files.
You can learn more about Shareable Configs on the official ESLint website.
To use the video.js Standard Style shareable config, first run this:
npm install eslint-config-videojs
Then, add this to your .eslintrc file:
{
"extends": "videojs"
}
Note: We omitted the eslint-config-
prefix since it is automatically assumed by ESLint.
You can override settings from the shareable config by adding them directly into your .eslintrc
file.
This project should almost never change.
A rule should only change if there is a very compelling reason that the video.js core contributors have agreed upon by discussion in an issue.
Because this project can cause builds to fail, we want to avoid any potentially breaking changes outside of major versions. As such, these rules will be followed:
This should allow common version ranges (~
and ^
) to never introduce a change that could break someone's build due to linter errors!
Apache-2.0. Copyright (c) Brightcove, Inc.
This project is based on eslint-config-standard
, which is licensed under the MIT license and copyright (c) Feross Aboukhadijeh.
FAQs
An ESLint Shareable Config for video.js Standard Style.
The npm package eslint-config-videojs receives a total of 1,123 weekly downloads. As such, eslint-config-videojs popularity was classified as popular.
We found that eslint-config-videojs demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 20 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.