
Security News
The Nightmare Before Deployment
Season’s greetings from Socket, and here’s to a calm end of year: clean dependencies, boring pipelines, no surprises.
purescript-suggest
Advanced tools
Command line tool (and library) to apply the suggested fixes from psc for warnings, such as
removing redundant imports, or making imports explicit.
This is ALPHA software that modifies your source code in place by design. Errors in this code, or any issues with the warnings passed in, could result in the deletion of your precious source code.
COMMIT EARLY COMMIT OFTEN.
Not currently handling any error suggestions which don't span entire lines. As of the compiler version 0.8.5 I think this is OK but by 0.9.0 improvements will be required.
To install ps-suggest globally:
npm install -g purescript-suggest
Pipe the JSON compiler output to stdin of ps-suggest. You probably want to use
psa, possibly with a warning stash and almost certainly filtering out library
errors. This also gives you the chance to choose which codes to replace.
To check changes that will be applied:
pulp build --stash --censor-lib --json-errors 2>&1 | ps-suggest --list
To apply the changes to all affected files:
pulp build --stash --censor-lib --json-errors 2>&1 | ps-suggest --apply
Install purescript-suggest via bower and use something like Publish.applySuggestions, which takes
already parsed errors ala purescript-psa.
FAQs
Apply PureScript compiler suggestions to fix warnings
The npm package purescript-suggest receives a total of 26 weekly downloads. As such, purescript-suggest popularity was classified as not popular.
We found that purescript-suggest demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Season’s greetings from Socket, and here’s to a calm end of year: clean dependencies, boring pipelines, no surprises.

Research
/Security News
Impostor NuGet package Tracer.Fody.NLog typosquats Tracer.Fody and its author, using homoglyph tricks, and exfiltrates Stratis wallet JSON/passwords to a Russian IP address.

Security News
Deno 2.6 introduces deno audit with a new --socket flag that plugs directly into Socket to bring supply chain security checks into the Deno CLI.