
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
stylelint-bundle
Advanced tools
This repository branch modifies Stylelint and creates a bundle:
config.customSyntax === "sugarss".npm install --legacy-peer-deps (NPM v7 and newer) or npm install (older NPM)npm run build.stylelint-bundle.min.js is created in dist directory using the modified version of Stylelint.npm test for testing.The resulting bundle:
fs) or path (path) are bypassed or removed.Within your HTML page, load the bundle.
<script src="stylelint-bundle.min.js"></script>
Access the stylelint global:
stylelint.lint({
code: "body { color: #000; }",
config: {
customSyntax: 'sugarss',
rules: { /*...*/ },
formatter: () => {}
}
}).then(({results}) => {
console.log(results[0]);
});
To get more details, including all the options and return promise values, see the stylelint Node API page; but, don't forget the limitations of this bundle!
To update to a new version of Stylelint:
npm install stylelint@latest
npm run build
It will install the latest stylelint, bump the version number in package.json and package-lock.json, then build the bundle.
To test it:
npm test
Set environment variable DEBUG to 1 then run npm run build:
stats.json.FAQs
Create & provide a bundled version of Stylelint
The npm package stylelint-bundle receives a total of 108 weekly downloads. As such, stylelint-bundle popularity was classified as not popular.
We found that stylelint-bundle demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.