
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
rush-lint-staged-plugin
Advanced tools
Rush plugin for lint-staged
Please follow the official doc to enable this plugin in your repo.
lint-staged
rush lint-staged
pre-commit
hookcommon/git-hooks/pre-commit
#!/bin/sh
node common/scripts/install-run-rush.js lint-staged || exit $?
lint-staged
config in root path.The reason of adding this file is the fact that lint-staged
behaves differently with the number of config files. With this placeholder config, lint-staged
will always find multiple config files in your monorepo, which corrects the working directory of each task.
<monorepo_root_path>/.lintstagedrc.json
{
"*": "echo ok"
}
lint-staged@>=12.2.1
supports a new feature called multiple config files. With this feature, each staged files can load different lint-staged configuration. This plugin invokes lintStaged
for you. No more no less.
For example,
monorepo-root
├── scripts
| └── index.js
├── apps/my-app
| ├── index.js
| └── .lintstagedrc.js
└── libraries/my-lib
├── index.js
└── .lintstagedrc.js
Assuming git staged apps/my-app/index.js
, libraries/my-lib/index.js
and scripts/index.js
when rush lint-staged
runs,
apps/my-app/index.js
uses config from apps/my-app/.lintstagedrc.js
libraries/my-lib/index.js
uses config from libraries/my-lib/.lintstagedrc.js
scripts/index.js
has no related config, nothing runs for this fileFAQs
Rush plugin for lint-staged
The npm package rush-lint-staged-plugin receives a total of 1,957 weekly downloads. As such, rush-lint-staged-plugin popularity was classified as popular.
We found that rush-lint-staged-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.