Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@antfu/eslint-config
Advanced tools
@antfu/eslint-config is a comprehensive ESLint configuration package designed to streamline the process of setting up linting for JavaScript and TypeScript projects. It includes a set of predefined rules and plugins that enforce code quality and consistency, making it easier to maintain and scale codebases.
Basic JavaScript Linting
This feature provides a basic set of linting rules for JavaScript projects. By extending the @antfu configuration, you get a well-rounded set of rules that enforce best practices and code quality.
{
"extends": "@antfu"
}
TypeScript Support
This feature extends the basic JavaScript linting to include TypeScript support. By specifying the TypeScript configuration file, you can ensure that your TypeScript code adheres to the same quality standards.
{
"extends": "@antfu",
"parserOptions": {
"project": "./tsconfig.json"
}
}
Vue.js Support
This feature adds support for linting Vue.js projects. By extending both the base and Vue-specific configurations, you can enforce consistent coding standards across your Vue components.
{
"extends": [
"@antfu",
"@antfu/eslint-config-vue"
]
}
Prettier Integration
This feature integrates Prettier with ESLint, allowing you to use Prettier for code formatting while still enforcing ESLint rules. This ensures that your code is not only correct but also consistently formatted.
{
"extends": [
"@antfu",
"@antfu/eslint-config-prettier"
]
}
eslint-config-airbnb is one of the most popular ESLint configurations. It provides a comprehensive set of rules based on Airbnb's JavaScript style guide. Compared to @antfu/eslint-config, it is more opinionated and widely adopted in the industry.
eslint-config-standard is another popular ESLint configuration that enforces JavaScript Standard Style. It is less opinionated than eslint-config-airbnb and focuses on simplicity and readability. It is a good alternative for those who prefer a more minimalistic approach.
eslint-config-prettier is designed to disable all ESLint rules that conflict with Prettier. It is often used in conjunction with other ESLint configurations to ensure that code formatting is handled by Prettier while ESLint focuses on code quality. This package is similar to the Prettier integration feature in @antfu/eslint-config.
.gitignore
by default[!IMPORTANT] Since v1.0.0, this config is rewritten to the new ESLint Flat config, check the release note for more details.
We provided a CLI tool to help you set up your project, or migrate from the legacy config to the new flat config with one command.
pnpm dlx @antfu/eslint-config@latest
If you prefer to set up manually:
pnpm i -D eslint @antfu/eslint-config
And create eslint.config.mjs
in your project root:
// eslint.config.mjs
import antfu from '@antfu/eslint-config'
export default antfu()
If you still use some configs from the legacy eslintrc format, you can use the @eslint/eslintrc
package to convert them to the flat config.
// eslint.config.mjs
import antfu from '@antfu/eslint-config'
import { FlatCompat } from '@eslint/eslintrc'
const compat = new FlatCompat()
export default antfu(
{
ignores: [],
},
// Legacy config
...compat.config({
extends: [
'eslint:recommended',
// Other extends...
],
})
// Other flat configs...
)
Note that
.eslintignore
no longer works in Flat config, see customization for more details.
For example:
{
"scripts": {
"lint": "eslint .",
"lint:fix": "eslint . --fix"
}
}
Install VS Code ESLint extension
Add the following settings to your .vscode/settings.json
:
{
// Disable the default formatter, use eslint instead
"prettier.enable": false,
"editor.formatOnSave": false,
// Auto fix
"editor.codeActionsOnSave": {
"source.fixAll.eslint": "explicit",
"source.organizeImports": "never"
},
// Silent the stylistic rules in you IDE, but still auto fix them
"eslint.rules.customizations": [
{ "rule": "style/*", "severity": "off" },
{ "rule": "format/*", "severity": "off" },
{ "rule": "*-indent", "severity": "off" },
{ "rule": "*-spacing", "severity": "off" },
{ "rule": "*-spaces", "severity": "off" },
{ "rule": "*-order", "severity": "off" },
{ "rule": "*-dangle", "severity": "off" },
{ "rule": "*-newline", "severity": "off" },
{ "rule": "*quotes", "severity": "off" },
{ "rule": "*semi", "severity": "off" }
],
// Enable eslint for all supported languages
"eslint.validate": [
"javascript",
"javascriptreact",
"typescript",
"typescriptreact",
"vue",
"html",
"markdown",
"json",
"jsonc",
"yaml",
"toml",
"xml",
"gql",
"graphql",
"astro",
"css",
"less",
"scss",
"pcss",
"postcss"
]
}
Since v1.0, we migrated to ESLint Flat config. It provides much better organization and composition.
Normally you only need to import the antfu
preset:
// eslint.config.js
import antfu from '@antfu/eslint-config'
export default antfu()
And that's it! Or you can configure each integration individually, for example:
// eslint.config.js
import antfu from '@antfu/eslint-config'
export default antfu({
// Type of the project. 'lib' for libraries, the default is 'app'
type: 'lib',
// Enable stylistic formatting rules
// stylistic: true,
// Or customize the stylistic rules
stylistic: {
indent: 2, // 4, or 'tab'
quotes: 'single', // or 'double'
},
// TypeScript and Vue are autoetected, you can also explicitly enable them:
typescript: true,
vue: true,
// Disable jsonc and yaml support
jsonc: false,
yaml: false,
// `.eslintignore` is no longer supported in Flat config, use `ignores` instead
ignores: [
'**/fixtures',
// ...globs
]
})
The antfu
factory function also accepts any number of arbitrary custom config overrides:
// eslint.config.js
import antfu from '@antfu/eslint-config'
export default antfu(
{
// Configures for antfu's config
},
// From the second arguments they are ESLint Flat Configs
// you can have multiple configs
{
files: ['**/*.ts'],
rules: {},
},
{
rules: {},
},
)
Going more advanced, you can also import fine-grained configs and compose them as you wish:
We wouldn't recommend using this style in general unless you know exactly what they are doing, as there are shared options between configs and might need extra care to make them consistent.
// eslint.config.js
import {
combine,
comments,
ignores,
imports,
javascript,
jsdoc,
jsonc,
markdown,
node,
sortPackageJson,
sortTsconfig,
stylistic,
toml,
typescript,
unicorn,
vue,
yaml,
} from '@antfu/eslint-config'
export default combine(
ignores(),
javascript(/* Options */),
comments(),
node(),
jsdoc(),
imports(),
unicorn(),
typescript(/* Options */),
stylistic(),
vue(),
jsonc(),
yaml(),
toml(),
markdown(),
)
Check out the configs and factory for more details.
Thanks to sxzz/eslint-config for the inspiration and reference.
Since flat config requires us to explicitly provide the plugin names (instead of the mandatory convention from npm package name), we renamed some plugins to make the overall scope more consistent and easier to write.
New Prefix | Original Prefix | Source Plugin |
---|---|---|
import/* | import-x/* | eslint-plugin-import-x |
node/* | n/* | eslint-plugin-n |
yaml/* | yml/* | eslint-plugin-yml |
ts/* | @typescript-eslint/* | @typescript-eslint/eslint-plugin |
style/* | @stylistic/* | @stylistic/eslint-plugin |
test/* | vitest/* | eslint-plugin-vitest |
test/* | no-only-tests/* | eslint-plugin-no-only-tests |
When you want to override rules, or disable them inline, you need to update to the new prefix:
-// eslint-disable-next-line @typescript-eslint/consistent-type-definitions
+// eslint-disable-next-line ts/consistent-type-definitions
type foo = { bar: 2 }
[!NOTE] About plugin renaming - it is actually rather a dangrous move that might leading to potential naming collisions, pointed out here and here. As this config also very personal and opinionated, I ambitiously position this config as the only "top-level" config per project, that might pivots the taste of how rules are named.
This config cares more about the user-facings DX, and try to ease out the implementation details. For example, users could keep using the semantic
import/order
without ever knowing the underlying plugin has migrated twice toeslint-plugin-i
and then toeslint-plugin-import-x
. User are also not forced to migrate to the impliciti/order
halfway only because we swapped the implementation to a fork.That said, it's probably still not a good idea. You might not want to doing this if you are maintaining your own eslint config.
Feel free to open issues if you want to combine this config with some other config presets but faced naming collisions. I am happy to figure out a way to make them work. But at this moment I have no plan to revert the renaming.
Since v2.9.0, this preset will automatically rename the plugins also for your custom configs. You can use the original prefix to override the rules directly.
If you really want to use the original prefix, you can revert the plugin renaming by:
import antfu from '@antfu/eslint-config'
export default antfu()
.renamePlugins({
ts: '@typescript-eslint',
yaml: 'yml',
node: 'n'
// ...
})
Certain rules would only be enabled in specific files, for example, ts/*
rules would only be enabled in .ts
files and vue/*
rules would only be enabled in .vue
files. If you want to override the rules, you need to specify the file extension:
// eslint.config.js
import antfu from '@antfu/eslint-config'
export default antfu(
{
vue: true,
typescript: true
},
{
// Remember to specify the file glob here, otherwise it might cause the vue plugin to handle non-vue files
files: ['**/*.vue'],
rules: {
'vue/operator-linebreak': ['error', 'before'],
},
},
{
// Without `files`, they are general rules for all files
rules: {
'style/semi': ['error', 'never'],
},
}
)
We also provided the overrides
options in each integration to make it easier:
// eslint.config.js
import antfu from '@antfu/eslint-config'
export default antfu({
vue: {
overrides: {
'vue/operator-linebreak': ['error', 'before'],
},
},
typescript: {
overrides: {
'ts/consistent-type-definitions': ['error', 'interface'],
},
},
yaml: {
overrides: {
// ...
},
},
})
Since v2.10.0, the factory function antfu()
returns a FlatConfigComposer
object from eslint-flat-config-utils
where you can chain the methods to compose the config even more flexibly.
// eslint.config.js
import antfu from '@antfu/eslint-config'
export default antfu()
.prepend(
// some configs before the main config
)
// overrides any named configs
.override(
'antfu/imports',
{
rules: {
'import/order': ['error', { 'newlines-between': 'always' }],
}
}
)
// rename plugin prefixes
.renamePlugins({
'old-prefix': 'new-prefix',
// ...
})
// ...
Vue support is detected automatically by checking if vue
is installed in your project. You can also explicitly enable/disable it:
// eslint.config.js
import antfu from '@antfu/eslint-config'
export default antfu({
vue: true
})
We have limited support for Vue 2 (as it's already reached EOL). If you are still using Vue 2, you can configure it manually by setting vueVersion
to 2
:
// eslint.config.js
import antfu from '@antfu/eslint-config'
export default antfu({
vue: {
vueVersion: 2
},
})
As it's in maintenance mode, we only accept bug fixes for Vue 2. It might also be removed in the future when eslint-plugin-vue
drops support for Vue 2. We recommend upgrading to Vue 3 if possible.
We provide some optional configs for specific use cases, that we don't include their dependencies by default.
Use external formatters to format files that ESLint cannot handle yet (.css
, .html
, etc). Powered by eslint-plugin-format
.
// eslint.config.js
import antfu from '@antfu/eslint-config'
export default antfu({
formatters: {
/**
* Format CSS, LESS, SCSS files, also the `<style>` blocks in Vue
* By default uses Prettier
*/
css: true,
/**
* Format HTML files
* By default uses Prettier
*/
html: true,
/**
* Format Markdown files
* Supports Prettier and dprint
* By default uses Prettier
*/
markdown: 'prettier'
}
})
Running npx eslint
should prompt you to install the required dependencies, otherwise, you can install them manually:
npm i -D eslint-plugin-format
To enable React support, you need to explicitly turn it on:
// eslint.config.js
import antfu from '@antfu/eslint-config'
export default antfu({
react: true,
})
Running npx eslint
should prompt you to install the required dependencies, otherwise, you can install them manually:
npm i -D @eslint-react/eslint-plugin eslint-plugin-react-hooks eslint-plugin-react-refresh
To enable svelte support, you need to explicitly turn it on:
// eslint.config.js
import antfu from '@antfu/eslint-config'
export default antfu({
svelte: true,
})
Running npx eslint
should prompt you to install the required dependencies, otherwise, you can install them manually:
npm i -D eslint-plugin-svelte
To enable astro support, you need to explicitly turn it on:
// eslint.config.js
import antfu from '@antfu/eslint-config'
export default antfu({
astro: true,
})
Running npx eslint
should prompt you to install the required dependencies, otherwise, you can install them manually:
npm i -D eslint-plugin-astro
To enable Solid support, you need to explicitly turn it on:
// eslint.config.js
import antfu from '@antfu/eslint-config'
export default antfu({
solid: true,
})
Running npx eslint
should prompt you to install the required dependencies, otherwise, you can install them manually:
npm i -D eslint-plugin-solid
To enable UnoCSS support, you need to explicitly turn it on:
// eslint.config.js
import antfu from '@antfu/eslint-config'
export default antfu({
unocss: true,
})
Running npx eslint
should prompt you to install the required dependencies, otherwise, you can install them manually:
npm i -D @unocss/eslint-plugin
This config also provides some optional plugins/rules for extended usage.
command
Powered by eslint-plugin-command
. It is not a typical rule for linting, but an on-demand micro-codemod tool that triggers by specific comments.
For a few triggers, for example:
/// to-function
- converts an arrow function to a normal function/// to-arrow
- converts a normal function to an arrow function/// to-for-each
- converts a for-in/for-of loop to .forEach()
/// to-for-of
- converts a .forEach()
to a for-of loop/// keep-sorted
- sorts an object/array/interfaceYou can add the trigger comment one line above the code you want to transform, for example (note the triple slash):
/// to-function
const foo = async (msg: string): void => {
console.log(msg)
}
Will be transformed to this when you hit save with your editor or run eslint . --fix
:
async function foo(msg: string): void {
console.log(msg)
}
The command comments are usually one-off and will be removed along with the transformation.
You can optionally enable the type aware rules by passing the options object to the typescript
config:
// eslint.config.js
import antfu from '@antfu/eslint-config'
export default antfu({
typescript: {
tsconfigPath: 'tsconfig.json',
},
})
Some rules are disabled when inside ESLint IDE integrations, namely unused-imports/no-unused-imports
test/no-only-tests
This is to prevent unused imports from getting removed by the IDE during refactoring to get a better developer experience. Those rules will be applied when you run ESLint in the terminal or Lint Staged. If you don't want this behavior, you can disable them:
// eslint.config.js
import antfu from '@antfu/eslint-config'
export default antfu({
isInEditor: false
})
If you want to apply lint and auto-fix before every commit, you can add the following to your package.json
:
{
"simple-git-hooks": {
"pre-commit": "pnpm lint-staged"
},
"lint-staged": {
"*": "eslint --fix"
}
}
and then
npm i -D lint-staged simple-git-hooks
// to active the hooks
npx simple-git-hooks
I built a visual tool to help you view what rules are enabled in your project and apply them to what files, @eslint/config-inspector
Go to your project root that contains eslint.config.js
and run:
npx @eslint/config-inspector
This project follows Semantic Versioning for releases. However, since this is just a config and involves opinions and many moving parts, we don't treat rules changes as breaking changes.
If you enjoy this code style, and would like to mention it in your project, here is the badge you can use:
[![code style](https://antfu.me/badge-code-style.svg)](https://github.com/antfu/eslint-config)
Well, you can still use Prettier to format files that are not supported well by ESLint yet, such as .css
, .html
, etc. See formatters for more details.
dprint is also a great formatter that with more abilities to customize. However, it's in the same model as Prettier which reads the AST and reprints the code from scratch. This means it's similar to Prettier, which ignores the original line breaks and might also cause the inconsistent diff. So in general, we prefer to use ESLint to format and lint JavaScript/TypeScript code.
Meanwhile, we do have dprint integrations for formatting other files such as .md
. See formatters for more details.
You can opt-in to the formatters
feature to format your CSS. Note that it's only doing formatting, but not linting. If you want proper linting support, give stylelint
a try.
I am a very opinionated person, so as this config. I prefer the top-level functions always using the function declaration over arrow functions; I prefer one-line if statements without braces and always wraps, and so on. I even wrote some custom rules to enforce them.
I know they are not necessarily the popular opinions. If you really want to get rid of them, you can disable them with:
import antfu from '@antfu/eslint-config'
export default antfu({
lessOpinionated: true
})
Sure, you can configure and override rules locally in your project to fit your needs. If that still does not work for you, you can always fork this repo and maintain your own.
MIT License © 2019-PRESENT Anthony Fu
FAQs
Anthony's ESLint config
The npm package @antfu/eslint-config receives a total of 131,360 weekly downloads. As such, @antfu/eslint-config popularity was classified as popular.
We found that @antfu/eslint-config demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.