Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
stylelint-config-werk85
Advanced tools
Default stylelint configuration for all werk85 projects
Default stylelint configuration for all werk85 projects
yarn add stylelint-config-werk85 stylelint -D
Create a .stylelintrc.json
file in your project root and add the following content
{
"extends": "stylelint-config-werk85"
}
{
"extends": [
"stylelint-config-werk85",
"stylelint-config-werk85/scss"
]
}
It is recommended to install the vscode-styled-components
Extension for having syntax highlighting and IntelliSense for styled-components as well.
{
"extends": [
"stylelint-config-werk85",
"stylelint-config-werk85/styled"
]
}
Following additions to your project are recommended
For convenience you can add the following npm scripts to your package.json
{
"scripts": {
"lint:styles": "stylelint src/**/*.{scss,tsx}",
"lint:styles:fix": "yarn lint:styles --fix",
}
}
To ensure usage of recommended extension you can add following to .vscode/extensions.json
within your project.
{
"recommendations": [
"styled-components.vscode-styled-components",
"stylelint.vscode-stylelint"
]
}
Make sure to have in your or the workspace VSCode settings the following defined:
"stylelint.validate": [
"css",
"scss"
]
Make sure you have added all files you want to be included in the release in the package.json
s files
property.
Logon to NPM Package Registry via
npm login
Bump version in package.json
and run
npm publish
FAQs
Default stylelint configuration for all werk85 projects
We found that stylelint-config-werk85 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.