Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
eslint-plugin-eslint-plugin
Advanced tools
eslint-plugin-eslint-plugin is an ESLint plugin designed to help developers create and maintain their own ESLint plugins. It provides rules and utilities that enforce best practices and catch common mistakes in ESLint plugin development.
Rule to enforce meta property in rule definitions
This feature ensures that each rule in your ESLint plugin has a `meta.docs.url` property, which is useful for documentation purposes.
module.exports = {
rules: {
'require-meta-docs-url': require('./lib/rules/require-meta-docs-url')
}
};
Rule to enforce correct rule tester usage
This feature checks that your rule tests are consistent and follow best practices, ensuring that your tests are reliable and maintainable.
module.exports = {
rules: {
'consistent-output': require('./lib/rules/consistent-output')
}
};
Rule to enforce correct use of context.report
This feature ensures that you are using the `context.report` API correctly, avoiding deprecated methods and promoting the use of the latest API.
module.exports = {
rules: {
'no-deprecated-report-api': require('./lib/rules/no-deprecated-report-api')
}
};
eslint-plugin-eslint-comments provides rules for best practices around ESLint directive comments (e.g., `// eslint-disable`). It helps ensure that these comments are used correctly and not overused, which is somewhat related to maintaining ESLint configurations but focuses on comments rather than plugin development.
eslint-plugin-node provides rules for Node.js-specific code, ensuring that your code adheres to best practices for Node.js development. While it is not focused on ESLint plugin development, it shares the goal of improving code quality through custom rules.
eslint-plugin-import offers rules to ensure proper import/export syntax and practices in JavaScript modules. It helps catch common issues with ES6 imports/exports, which is different from plugin development but similarly aims to improve code quality through linting.
An ESLint plugin for linting ESLint plugins
You'll first need to install ESLint:
$ npm i eslint --save-dev
Next, install eslint-plugin-eslint-plugin
:
$ npm install eslint-plugin-eslint-plugin --save-dev
Note: If you installed ESLint globally (using the -g
flag) then you must also install eslint-plugin-eslint-plugin
globally.
Add eslint-plugin
to the plugins section of your .eslintrc
configuration file. You can omit the eslint-plugin-
prefix:
{
"plugins": [
"eslint-plugin"
]
}
Then configure the rules you want to use under the rules section.
{
"rules": {
"eslint-plugin/no-deprecated-report-api": "error"
}
}
Additionally, you can enable all recommended rules from this plugin:
{
"extends": [
"plugin:eslint-plugin/recommended"
]
}
✔️ indicates that a rule is recommended. 🛠 indicates that a rule is fixable.
Name | ✔️ | 🛠 | Description |
---|---|---|---|
no-deprecated-report-api | ✔️ | 🛠 | Prohibits the deprecated context.report(node, message) API |
report-message-format | ✔️ | Enforces a consistent format for report messages | |
require-meta-fixable | ✔️ | Requires a meta.fixable property for fixable rules | |
no-missing-placeholders | ✔️ | Disallows missing placeholders in rule report messages |
FAQs
An ESLint plugin for linting ESLint plugins
The npm package eslint-plugin-eslint-plugin receives a total of 237,861 weekly downloads. As such, eslint-plugin-eslint-plugin popularity was classified as popular.
We found that eslint-plugin-eslint-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.