Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
lesshint
is a tool to aid you in writing clean and consistent Less.
This is the final project for a associate degree, because of this pull requests cannot be accepted until mid-June 2015.
However, I (jwilsson) will need your help to decide which options that should be available for each linter
and which option that should be the default value. For each linter that I add, I'll open a corresponding issue where a discussion/vote will
take place for which options that should be included and which one should be the default. Therefore, I highly recommend users of this tool
to not trust the defaults until a 1.0
release since some default values will change. In short, be extremely specific about which options
you specify, don't trust the defaults just yet.
Please feel free to submit bug reports and other forms of feedback. That's greatly appreciated!
Run the following command from the command line (add -g to install globally):
npm install lesshint
lesshint
is customizable and we highly recommend you to look at the available options to tailor it to your needs.
Start by creating a .lesshintrc
file in your project root and add your settings to it. It will be automatically loaded and merged with the default values.
Each option is then specifed by it's own JSON object, for example:
"spaceAfterPropertyColon": {
"enabled": true,
"style": "one_space" // Comments are allowed
}
If you're running lesshint
from the command line, the -c
or --config
flags can be used to load any valid configuration file.
We are aware of some instances where some Less features won't be properly parsed. In those cases the whole file will simply be ignored by lesshint
.
:extend()
rules are supported. Related issue.@media
directives are not supported. Related issue.0.4.0 (2015-05-10)
LessHint
class is now called Lesshint
.importantRule
stringQuotes
urlFormat
urlQuotes
false
. No need to set enabled: false
anymore.FAQs
A tool to aid you in writing clean and consistent Less.
The npm package lesshint receives a total of 6,068 weekly downloads. As such, lesshint popularity was classified as popular.
We found that lesshint demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.