Security News
PyPI’s New Archival Feature Closes a Major Security Gap
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
grunt-analyze-es6-modules
Advanced tools
grunt-analyze-es6-modules is a grunt wrapper around the analyze-es6-modules package.
This plugin follows all of the grunt multi-task conventions. Documentation for the different configuration options can be found below.
Be sure to read the documentation for analyze-es6-modules before using any of the options found below.
options
: An object containing options passed directly to the analyze-es6-modules package. Documentation for those options can be found here.issueFilter
: An optional function that will filter down issues.getIssueSeverity
: An optional function that takes an issue and returns the severity for the issue. The severity can be either error
, warning
, or none
. (See more about severity below.)getMessageForIssue
: An optional function that takes an issue and returns a string error/warning message.reportIssue
: An optional function that takes a severity, a message, and an issue, and reports the error in some way. The default implementation uses console.error
and console.warning
.By default, every issue is assigned a severity. The default severities can be found below:
Issue Type | Severity |
---|---|
missingModule | error |
badImport | error |
duplicateExport | error |
unusedModule | warning |
unusedExport | warning |
As of now, there are only three severities: error
, warning
, and none
. That may change in the future.
This task will return a successful error code if there are no issues with severity error
. If there are any issues with severity error
, this task will fail. Other severity issues will not affect the task status.
FAQs
Grunt plugin for analyze-es6-modules.
We found that grunt-analyze-es6-modules demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
Research
Security News
Malicious npm package postcss-optimizer delivers BeaverTail malware, targeting developer systems; similarities to past campaigns suggest a North Korean connection.
Security News
CISA's KEV data is now on GitHub, offering easier access, API integration, commit history tracking, and automated updates for security teams and researchers.