
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
eslint-plugin-grommet
Advanced tools
Lint rules to use with Grommet.
You'll first need to install ESLint:
$ npm i eslint --save-dev
Next, install eslint-plugin-grommet
:
$ npm install eslint-plugin-grommet --save-dev
To use the recommended set of rules, add plugin:grommet/recommended
to the extends section of your .eslintrc
configuration file. The plugin:
prefix informs ESLint that the configuration lives within an eslint-plugin-
package as opposed to an eslint-config-
package.
{
"extends": ["plugin:grommet/recommended"]
}
To opt-in or opt-out of specific rules, add grommet
to the plugins section of your .eslintrc
configuration file. You can omit the eslint-plugin-
prefix:
{
"plugins": ["grommet"]
}
Then configure the rules you want to use under the rules section.
{
"rules": {
"grommet/rule-name": 2
}
}
In the configuration below, the recommended rules are all being enforced except for formfield-prefer-children
. Be mindful when disabling rules from the recommended configuration as this may result in accessibility errors or other missed best practice guidance.
{
"extends": ["plugin:grommet/recommended"],
"plugins": ["grommet"],
"rules": {
"grommet/formfield-prefer-children": 0
}
}
FAQs
Lint rules to use with Grommet.
The npm package eslint-plugin-grommet receives a total of 85 weekly downloads. As such, eslint-plugin-grommet popularity was classified as not popular.
We found that eslint-plugin-grommet demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.