
Research
/Security News
Intercom’s npm Package Compromised in Ongoing Mini Shai-Hulud Worm Attack
Compromised intercom-client@7.0.4 npm package is tied to the ongoing Mini Shai-Hulud worm attack targeting developer and CI/CD secrets.
eslint-engine
Advanced tools
Check JavaScript syntax using eslint conveniently in your project
eslint-engine is a streamlined way to use eslint in your project. Just type eslint-check and you're done.

Install it:
npm install -g eslint-engine
Then in your project, install eslint as a devDependency and create an .eslintrc. Or use one of these presets to help you out:
# pick one
eslint-install standard
eslint-install airbnb
eslint-install xo
eslint-install --help # view all
Now run a check:
$ eslint-check
index.js:53:11: Expected indentation of 8 space characters but found 10. (indent)
index.js:57:39: Trailing spaces not allowed. (no-trailing-spaces)
index.js:59:48: There should be no space before ','. (comma-spacing)
Convenient: eslint-engine checks all the JS files in your project while ignoring some common ignorables. It can also be ran as a global command, unlike eslint.
# with eslint-engine
eslint-check
# with eslint
./node_modules/.bin/eslint '**/*.js' --ignore-pattern='node_modules'
Easy to install: presets for popular eslint configs can be installed easily.
# with eslint-engine
eslint-install standard
# with eslint
echo "{ extends: ['standard', 'standard-jsx'] }" > .eslintrc
npm install --save eslint eslint-config-standard ... #snip
./node_modules/.bin/eslint ... #snip
Test runner integrations: eslint-engine can integrate with tape, ava, and mocha to provide you with fast linting as part of your test suite.
eslint.ignore — You can add ignores via package.json.
/* package.json */
{
"eslint": {
"ignore": "lib/xyz"
}
}
eslint.include — You can add additional files as well.
/* package.json */
{
"eslint": {
"include": "bin/*"
}
}
Add this test file to your tape or ava suite:
test('eslint', require('eslint-engine/tape')())
Add this test file to your mocha suite:
describe('eslint', require('eslint-engine/mocha')())
Access the programmatic API this way:
var eslint = require('eslint-engine')
eslint(options, (err, res) => {
res.errorCount
res.results.forEach(item => {
item.filePath
item.messages.forEach(msg => {
msg.line
msg.column
msg.message
msg.ruleId
})
})
})
eslint-engine © 2016+, Rico Sta. Cruz. Released under the MIT License.
Authored and maintained by Rico Sta. Cruz with help from contributors (list).
ricostacruz.com  · GitHub @rstacruz  · Twitter @rstacruz
FAQs
Check JavaScript syntax using eslint
We found that eslint-engine demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Compromised intercom-client@7.0.4 npm package is tied to the ongoing Mini Shai-Hulud worm attack targeting developer and CI/CD secrets.

Research
Socket detected a malicious supply chain attack on PyPI package lightning versions 2.6.2 and 2.6.3, which execute credential-stealing malware on import.

Research
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.