
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
eslint-plugin-nahoc
Advanced tools
Additional ESLint rules and ESLint configurations for @mysticatea.
npm install --save-dev eslint @eslint-community/eslint-plugin-mysticatea
^12.22.0 || ^14.17.0 || >=16.0.0 or newer versions.^6.6.0 || ^7.0.0 || ^8.0.0 or newer versions.Write in your ESLint configurations: http://eslint.org/docs/user-guide/configuring#using-the-configuration-from-a-plugin
plugin:nahoc-eslint/es2022 ... Basic configuration for ES2022.plugin:nahoc-eslint/es2021 ... Basic configuration for ES2021.plugin:nahoc-eslint/es2020 ... Basic configuration for ES2020.plugin:nahoc-eslint/es2019 ... Basic configuration for ES2019.plugin:nahoc-eslint/es2018 ... Basic configuration for ES2018.plugin:nahoc-eslint/es2017 ... Basic configuration for ES2017.plugin:nahoc-eslint/es2016 ... Basic configuration for ES2016.plugin:nahoc-eslint/es2015 ... Basic configuration for ES2015.plugin:nahoc-eslint/es5 ... Basic configuration for ES5.plugin:nahoc-eslint/+modules ... Additional configuration for ES modules.plugin:nahoc-eslint/+browser ... Additional configuration for browser environment.plugin:nahoc-eslint/+node ... Additional configuration for Node.js environment.plugin:nahoc-eslint/+eslint-plugin ... Additional configuration for ESLint plugins. This includes plugin:nahoc-eslint/+node setting.The main configurations plugin:nahoc-eslint/es* does:
.ts files as TypeScript then check by typescript-eslint-parser and eslint-plugin-typescript..vue files as Vue.js SFC then check by vue-eslint-parser and eslint-plugin-vue.test/tests directory as mocha's test code.scripts directory as Node.js environment..eslintrc.js file as a Node.js script.webpack.config.js file as a Node.js script.rollup.config.js file as an ES module.You can use combination of a main configuration and some additional configurations. For examples:
{
"extends": ["plugin:nahoc-eslint/es2015", "plugin:nahoc-eslint/+node"]
}
It handles
.jsfiles as scripts and.mjsfiles as modules.
{
"extends": ["plugin:nahoc-eslint/es2015", "plugin:nahoc-eslint/+browser"]
}
{
"extends": [
"plugin:nahoc-eslint/es2015",
"plugin:nahoc-eslint/+modules",
"plugin:nahoc-eslint/+browser"
]
}
{
"extends": [
"plugin:nahoc-eslint/es2015",
"plugin:nahoc-eslint/+eslint-plugin"
]
}
This plugin has some original rules and foreign rules.
var declaration as block-scoped. It disallows redeclarations, uses from outside of the scope, shadowing.this/super in static methods.for-of statements instead of Array#forEach or something like (fixable).nahoc-eslint/eslint-comments/* rules are imported from eslint-plugin-eslint-comments.nahoc-eslint/eslint-plugin/* rules are imported from eslint-plugin-eslint-plugin.nahoc-eslint/node/* rules are imported from eslint-plugin-node.nahoc-eslint/ts/* rules are imported from eslint-plugin-typescript.nahoc-eslint/vue/* rules are imported from eslint-plugin-vue.nahoc-eslint/prettier rule is imported from eslint-plugin-prettier.Q: Why don't you use those plugins directly?
> A: The combination with shareable configs and plugins has some problems because shareable configs were not designed to be used with plugins. @nzakas illustrated a way to use plugins as shareable configs together with other plugins in the discussion eslint/eslint#3458. This is the way.
This plugin follows semantic versioning and ESLint's Semantic Versioning Policy.
Welcome contributing!
Please use GitHub's Issues/PRs.
npm test runs tests and measures coverage.npm run clean removes the coverage result of npm test command.npm run coverage shows the coverage result of npm test command.npm run update updates auto-generated files.npm run watch runs tests and measures coverage when source code are changed.FAQs
Additional ESLint rules.
We found that eslint-plugin-nahoc demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.