
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
lint-fix-nodemon
Advanced tools
Watch your files and run ESLint + fix + nodemon on save
WHY DO YOU NEED THIS?
npm install lint-fix-nodemon --save-dev
or yarn add lint-fix-nodemon -D
You can run it with npx lint-fix-nodemon
or normally you should just add a script to your package.json file.
I usually name it "dev" ("dev": "lint-fix-nodemon"
) so you can run npm run dev
By default, it will assume nodemon should run the script specified as your "main" in your package.json file.
Otherwise you can also pass it in as an argument -- for example: lint-fix-nodemon ./api/start.js
Other configuration in terms of what files to watch and lint will be read from the nodemonConfig entry in your package.json file
It will automatically ignore your node_modules folder and any files/folders that start with "."
Normally when running eslint from the cli, you must specify the extensions you wish to run on, or it will automatically just default to .js files only.
To avoid having to set it again, we copy the extension settings from the nodemon config set in package.json file. This may mean you need to add some ignore rules in your eslintrc file, to ignore certain file types that you don't want to lint, but you do want changes to cause a nodemon restart.
{
...
"scripts": {
"dev": "lint-fix-nodemon api/start.js",
...
},
"nodemonConfig": {
"watch": ["api/"],
"ignore": ["api/scripts"],
"ext": "js,json,ts"
},
...
}
FAQs
watch files and run eslint+fix+nodemon without double restarts
The npm package lint-fix-nodemon receives a total of 2 weekly downloads. As such, lint-fix-nodemon popularity was classified as not popular.
We found that lint-fix-nodemon demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.