Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
eslint-config-vizia
Advanced tools
Common ESLint shareable config files for vizia.
Install into your project:
npm install --save eslint eslint-config-vizia
Make a .eslintrc.json
config file with the following in:
{
"env": {
"browser": true
}
"extends": "vizia"
}
You must specify your environment in the "env"
part. You can also customize
rules as you like.
As before the environment needs to be specified. Since Node 6+ has good ES2015 feature coverage, it makes sense to use ES2015 features. A sharable config is provided for ES2015 code:
{
"env": {
"node": true
}
"extends": "vizia/ES2015"
}
Internally this config extends the base vizia config.
Tests often look like bad code. They're prone to many more lines of code per
file than healthy production code etc. It's recommended to have a
.eslintrc.json
file in your test directory to address this. ESLint extends a
config found in a directory above automatically, so you only need to turn off
rules that become noisy in tests. Such a file might look like:
{
"env": {
"mocha": true
},
"rules": {
"max-statements": 'off',
"max-lines": 'off'
}
}
FAQs
The common vizia linter configs.
The npm package eslint-config-vizia receives a total of 11 weekly downloads. As such, eslint-config-vizia popularity was classified as not popular.
We found that eslint-config-vizia demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.