Husky Hooks

[nahumzs]

Estimation: unknown research

Husky hooks executed before committing your changes. We can use this to run linter and even testing to be sure that what we push into our repo has already passed most of the quality test.

https://github.com/typicode/husky

• Report and discuss with Ryan any possible security threats please refer to Alex https://github.com/acl-services/paprika/issues/11#issuecomment-449149556
• If we get a green 🚥 light, we should hook mostly linters and prettier if possible.

[alexzherdev]

While I love the idea, I would consult with Ryan on this. An npm package installing git hooks is a potential security threat. Imagine someone hijacking this package like what happened with eslint-scope.

[nahumzs]

😵 Thank you to bring this on @alexzherdev 👏, do you think we might mitigate any of these issues if we set up 2FA for deploying once we move to open source? but totally worth double checking before moving with this initiative.

[nahumzs]

This has been approved by Ryan and Alex, just keep in mind to add yarnpkg/yarn#5808 this before implementing husky hooks. 🎉

[nahumzs]

done by #34 and #35