
Security News
npm Adopts OIDC for Trusted Publishing in CI/CD Workflows
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
eslint-plugin-airtight
Advanced tools
A collection of additional `eslint` rules, initially derived from [eslint-plugin-sinful](https://github.com/FauxFaux/eslint-plugin-sinful).
A collection of additional eslint
rules, initially derived from
eslint-plugin-sinful.
Stylistic. Tranforms "declare at top" exports into "inline" exports.
In:
export { foo }; function foo(...
Out:
export function foo(...
Migration. Can be configured to add a type to any parameter by name,
e.g. to ensure all your user
parameters are labelled with the UserDTO
type.
Config:
{ "user": ["./lib/dtos", "UserDTO"] }
In:
function foo(user, name: string) {`
Out:
import type { UserDTO } from '../../../lib/dtos';
function foo(user: User, name: string) {
Bug finder. Finds worrying catch blocks without making your code invalid, unlike upstream's version.
In:
try { return fooAsync(); }
catch (err) { /* never called */ }
Out:
try { return await fooAsync(); }
catch (err) { /* now called */ }
Feature. Adds the path/function to sequelize calls, such that some comment plugin could read them out and put them into the query.
In:
models.Potato.findOne({ where: { id } })
Out:
models.Potato.findOne({
comment: 'lib/potato/read.ts:getById',
where: { id },
})
Bug finder. Discourages the use of promise machinery which will result in resource starvation for other requests.
In:
return await Promise.all(longList.map((v) => someFunc(v)));
Out:
import { pMap } from 'p-map';
return await pMap(longList, (v) => someFunc(v), { concurrency: 6 });
FAQs
A collection of additional `eslint` rules, initially derived from [eslint-plugin-sinful](https://github.com/FauxFaux/eslint-plugin-sinful).
The npm package eslint-plugin-airtight receives a total of 2,854 weekly downloads. As such, eslint-plugin-airtight popularity was classified as popular.
We found that eslint-plugin-airtight demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.