Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
iamturns-js-toolbox
Advanced tools
WARNING!
This package is deprecated.
Features have been migrated to create-iamturns-app and iamturns-scripts.
Toolbox for my JavaScript projects
npm install iamturns-js-toolbox --save-dev
Example jest.config.js
file:
const { createJestConfig } = require("iamturns-js-toolbox")
module.exports = createJestConfig({
srcPath: "app", // default = 'src'/
web: true, // default = false
})
Example prettier.config.js
file:
// Some settings automatically inherited from .editorconfig
const { createPrettierConfig } = require("iamturns-js-toolbox")
module.exports = createPrettierConfig()
Example lint-staged.config.js
file:
const { createLintStagedConfig } = require("iamturns-js-toolbox")
module.exports = createLintStagedConfig({
skipDoctoc: true, // default = false
skipFormat: true, // default = false
skipLint: true, // default = false
skipTest: true, // default = false
})
Run Prettier on all supported files (js, ts, css, json, md, yaml, etc).
Run ESLint with --fix
to automatically fix any linting issues.
Note: all files will be formatted. Use a .prettierignore file to prevent formatting specific files or directories.
Example .prettierignore
file:
/node_modules
/package-lock.json
Run ESLint on all supported files.
Note: all files will be linted. Use an .eslintignore file to prevent linting specific files or directories.
Example .eslintignore
file:
/node_modules
Concurrently run lint
, test
, and build
commands.
Run lint-staged, then run build
command.
Note: lint-staged
requires a configuration file.
Update /node_modules
and /package-lock.json
according to semver rules defined in /package.json
files.
This is a safe operation (assuming dependencies correctly follow semantic versioning).
Once complete, check for outdated dependencies (outside of semver rules in /package.json
), and interactively select dependencies to update.
Remove /node_modules
and reinstall.
Reset to a fresh git checkout and reinstall.
Authored and maintained by Matt Turnbull (iamturns.com / @iamturns)
To all contributors (if you exist) - thank you!
Open source software licensed as MIT.
FAQs
Toolbox for my JavaScript projects
We found that iamturns-js-toolbox demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.