Security News
Supply Chain Attack Detected in @solana/web3.js Library
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
A Javascript style guide including linters for the Mozilla Foundation Engineering team.
This repo contains an ESLint "RC" file, which defines our standard JavaScript formatting rules.
Additionally, ESLint will discover common syntax errors in your code.
Assuming you already have Node and npm installed, run npm install -g eslint
in your terminal. This will create a global install of the ESLint CLI.
Even if you have ESLint as a global install, it's good practice to require it as a development dependency for your project. This ensures that it will be available for all developers regardless of their local configuration. It will also ensure that Travis is able to validate your code, which is a good idea since it ensures malformed code won't be deployed or merged.
Simply run npm install eslint --save-dev
in your project root.
After you include ESLint in your project you can use npm to install this RC file as a module, which you can direct ESLint to use.
Run npm install mofo-style --save-dev
Once you have ESLint and this RC file, you can lint your project's code.
For example:
eslint --config ./node_modules/mofo-style/.eslintrc.yaml example.js
It's recommended that you add a linting task to your project's task runner (preferably npm) as well as instruct Travis to execute it.
The RC provided in this repo is intended to cover any ES6 based project. It's up to you to extend it to cover your project's specific environment(s). You can either specify environments via the --env
flag or add a eslintConfig
field to your package.json
with your extended configuration. Read more on this topic here.
Refer to the RC file and the corresponding rule definitions for specifics.
To more easily follow the rules you can add the EditorConfig plugin to your editor (if it needs one), which will read an .editorconfig
file. Unfortunately, EditorConfig doesn't allow you to dynamically set a path for the config, so you'll need to copy .editorconfig into your project's root directory if it doesn't already have one.
FAQs
A Javascript style guide including linters for the Mozilla Foundation Engineering team.
The npm package mofo-style receives a total of 21 weekly downloads. As such, mofo-style popularity was classified as not popular.
We found that mofo-style demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.