Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
eslint-plugin-ts-files-only
Advanced tools
A plugin for ESLint that allows you to prevent creation of js files in specified folders.
npm install eslint-plugin-ts-only-files@latest --save-dev
{
"settings": {
"tsFilesOnly": require('./.tsFilesOnlyConfig.json')
// rest of your settings
},
"plugins": [
"ts-files-only",
// rest of your plugins
],
// rest of your eslintrc
}
This config file must contain an array of tsOnlyFolders and and array of perimittedFiles The folders in tsOnlyFolders will be recursively scanned any js files that are not in the perimittedFiles will be flagged as invalid.
Here's an example:
{
"tsOnlyFolders": [
"backend/src/server/modules",
"backend/src/server/models",
"backend/src/server/controllers",
"backend/src/server/common",
"backend/src/server/config"
],
"perimittedFiles": [
"backend/src/server/common/utils.js",
"backend/src/server/modules/myModule.js",
"backend/src/server/config/exampleConfig.js",
]
}
MIT
FAQs
prevents creation of js files in specified folders
The npm package eslint-plugin-ts-files-only receives a total of 2,308 weekly downloads. As such, eslint-plugin-ts-files-only popularity was classified as popular.
We found that eslint-plugin-ts-files-only demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.