
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
pa11y-lint-config
Advanced tools
Linter configurations for Pa11y projects. We use these configurations to ensure Pa11y's coding style remains consistent across our repositories.
This library requires Node.js 18 or above.
To include these config files in your project, first install ESLint and this module, saving them to development dependencies. For example, using npm:
npm install --save-dev eslint pa11y-lint-config
Now create the files .eslintrc.js and .eslintignore in your project root. The following command will create both files and populate them with sensible settings for a new Pa11y project:
printf "coverage\n" > .eslintignore
printf "'use strict';\n\nmodule.exports = require('pa11y-lint-config/eslint/es2017');\n" > .eslintrc.js
Two other standards can replace es2017 above:
es2015, for an ES2015/ES6 project, forgoing the use of more recent syntax additions such as asynces2009, for an ES2009/ES5 project, such as an older client-side codebaseA project which contains more than one standard, for example ES2017 for the server and ES2015 for the browser, can support each required standard by including a different config file in each relevant subdirectory.
There are many ways to contribute to Pa11y Lint Config, we cover these in the contributing guide for this repo.
If you're ready to contribute some code, clone this repo locally and commit your code on a new branch.
Please check that everything works by running the following before opening a PR:
npm test
When we release a new major version we will continue to support the previous major version for 6 months. This support will be limited to fixes for critical bugs and security issues.
Licensed under the Lesser General Public License (LGPL-3.0).
Copyright © 2023, Team Pa11y
3.0.0 (2023-10-26)
^8.51.0es2015's alias es6legacy's alias es5legacy to es2009FAQs
Linter configurations for Pa11y projects
We found that pa11y-lint-config demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.