
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
eslint-plugin-caleb
Advanced tools
Caleb Eby's ESLint Configuration. This exports itself as a "super-plugin" because of a limitation of ESLint.
The way this works is that it requires all of the plugin dependencies, and exports them from this plugin under a prefix.
The plugins that this exposes are:
This also exposes a couple rules from
shopify:
To override settings for any of these plugins, you must prefix the configuration
with caleb/, because the plugins are exposed through this "super-plugin".
{
"extends": ["plugin:calebeby/recommended"],
"rules": {
"caleb/unicorn/catch-error-name": "off",
"caleb/shopify/prefer-early-return": "off"
}
}
npm i -D eslint-plugin-caleb eslint prettier
Add this to your package.json:
{
"scripts": {
"check-lint": "eslint --ignore-path .gitignore . && prettier --list-different --ignore-path .gitignore '**/*.js'",
"lint": "eslint --ignore-path .gitignore --fix . && prettier --write --ignore-path .gitignore '**/*.js'"
},
"eslintConfig": {
"extends": ["plugin:caleb/recommended"]
},
"prettier": {
"singleQuote": true,
"trailingComma": "all",
"semi": false
}
}
This plugin exposes the following configurations:
recommended: This is the main configuration. This exposes base rules, as
well as some overrides for .ts/.tsx filesreact: This adds some settings for React-specific rulespreact: This is the same as react, except it excludes rules that are
irrelevant for Preactjest: This adds some jest rules for test files, and declares the jest
globals in those filesTo include these configurations, add the ones you want to your extends array:
["plugin:caleb/recommended", "plugin:caleb/jest"]
npm run check-lint
(this will automatically fix many linting issues)
npm run lint
FAQs
Caleb Eby's shareable ESLint configuration
The npm package eslint-plugin-caleb receives a total of 4 weekly downloads. As such, eslint-plugin-caleb popularity was classified as not popular.
We found that eslint-plugin-caleb demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.