
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
eslint-plugin-aurora-config
Advanced tools
Aurora 项目 ESLint 插件:提供一套可复用的基础 Flat Config(JS/TS/import),并附带若干 Aurora 约定的结构/语义类自定义规则。
npm i -D eslint eslint-plugin-aurora
说明:本插件内部会用到 @eslint/js、typescript-eslint、eslint-plugin-import、globals 等依赖;安装本插件时会一并安装。
如果你需要让 eslint-plugin-import 的 TypeScript 解析/路径解析更准确,建议项目也安装:
npm i -D eslint-import-resolver-typescript
在项目根目录创建/修改 eslint.config.js:
const aurora = require("eslint-plugin-aurora");
const baseDir = __dirname;
module.exports = [
// 1) 基础规则集(JS/TS/import)
...aurora.configs.recommended(baseDir),
// 2) 选择性启用 Aurora 自定义规则
{
plugins: { aurora },
rules: {
"aurora/base-check": "error",
"aurora/trial-check": "error",
"aurora/scene-check": "error",
"aurora/prefab-check": "error",
},
},
];
然后执行:
npx eslint .
在本项目根目录下执行。
# 1) 登录 npm(如已登录可跳过)
npm login
# 2) 更新版本号(按需选择 patch/minor/major)
npm version patch
# 3) 本地打包(生成 .tgz 包,用于自测/分发)
npm pack
# 4) 发布到 npm
npm publish
如果你想先确认发布内容是否正确,可以先运行:
npm publish --dry-run
configs.recommended(baseDir)生成基础 Flat Config 数组,包含:
@eslint/js 的 recommendedtypescript-eslint:
baseDir/tsconfig.json 存在,则启用 type-aware 的 recommendedTypeCheckedrecommendedeslint-plugin-import 的 recommended + 常用 resolver/settings
baseDir必须传项目根目录(用于定位tsconfig.json)。
aurora/base-check
aurora/trial-check
*trialService.ts 生效(不要求目录结构)TrialGenerator 子类、generate() 方法以及返回值包含 target_answeraurora/scene-check
*scene.ts 生效getSceneConfig() 返回aurora/prefab-check
*prefab.ts 生效PrefabConfig 结构,以及 GameObjectFactory remove/registerlib/index.js:插件入口(导出 rules 与 configs)lib/configs/base-config.js:基础 Flat Config 生成函数lib/rules/*.js:Aurora 自定义规则实现设计.mdFAQs
Aurora ESLint plugin (rules) + flat config (recommended)
We found that eslint-plugin-aurora-config demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.