
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
eslint-import-resolver-root-import
Advanced tools
Babel Plugin Root Import ESLint resolver.
This is a fork of eslint-import-resolver-babel-root-import that works with latest version of Babel using babel.config.js
for configaration.
yarn add eslint-plugin-import eslint-import-resolver-root-import
Inside your .eslintrc
file, pass this resolver to eslint-plugin-import
:
"settings": {
"import/resolver": "root-import"
}
And see [babel-plugin-root-import] to know how to configure your prefix/suffix.
Configuration will be parsed down from babel.config.js
file.
This plugin accept all configurations that eslint-import-resolver-node accepts plus rootPathSuffix
and rootPathPrefix
.
Both rootPathSuffix
and rootPathPrefix
are fetched by default from your babel.config.js
, but if you prefer you can define these values inside .eslintrc
.
{
"extends": "airbnb",
"rules": {},
"settings": {
"import/resolver": {
"root-import": {
"rootPathPrefix": "~",
"rootPathSuffix": "src/js",
"extensions": [".js", ".android.js", ".ios.js"]
}
}
}
}
In this case we are using .android.js
and .ios.js
in our extensions so in React Native we can import files like:
import MyComponent from '~/components/MyComponent';
And it will resolve to components/MyComponent/index.android.js
or components/MyComponent/index.ios.js
;
MIT, see LICENSE.md for details.
FAQs
Babel Plugin Root Import ESLint resolver.
The npm package eslint-import-resolver-root-import receives a total of 320 weekly downloads. As such, eslint-import-resolver-root-import popularity was classified as not popular.
We found that eslint-import-resolver-root-import demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.