
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@eslint-react/eslint-plugin
Advanced tools
A unified plugin that combines all individual plugins from the eslint-react monorepo into one.
v2.0.0 (TBD)
Target Environment Updates: Now ESM and ESLint Flat Config Only
eslint.config.js
)The following rules have been renamed:
react-x/no-comment-textnodes
-> react-x/jsx-no-comment-textnodes
react-x/no-nested-components
-> react-x/no-nested-component-definitions
react-x/prefer-react-namespace-import
-> react-x/prefer-namespace-import
The following rules have been consolidated into new rules:
react-x/jsx-shorthand-boolean
replaces avoid-shorthand-boolean
and prefer-shorthand-boolean
react-x/jsx-shorthand-fragment
replaces avoid-shorthand-fragment
and prefer-shorthand-fragment
react-hooks-extra/no-direct-set-state-in-use-effect
replaces no-direct-set-state-in-use-layout-effect
The following rules have been moved to new plugins:
react-hooks-extra/no-unnecessary-use-callback
-> react-x/no-unnecessary-use-callback
react-hooks-extra/no-unnecessary-use-memo
-> react-x/no-unnecessary-use-memo
react-hooks-extra/no-unnecessary-use-prefix
-> react-x/no-unnecessary-use-prefix
react-hooks-extra/prefer-use-state-lazy-initialization
-> react-x/prefer-use-state-lazy-initialization
The following settings have been removed from settings["react-x"]
:
additionalComponents
additionalHooks
skipImportCheck
Added the following new rules:
react-x/jsx-shorthand-boolean
: Enforces a consistent style for boolean attributesreact-x/jsx-shorthand-fragment
: Enforces a consistent style for React Fragmentsreact-x/no-forbidden-props
: Disallows specific props on componentsreact-x/no-unnecessary-key
: Reports unnecessary key
props on elementsreact-x/no-unused-props
: Reports unused props in componentsreact-dom/no-string-style-prop
: Disallows string values for the style
propreact-dom/prefer-namespace-import
: Enforces using a namespace import for react-dom
Added the following new rule to the recommended-type-checked
preset:
react-x/no-unused-props
: Reports unused props in componentsThe following rules now support Codemod features:
react-x/no-component-did-update
react-x/no-component-will-receive-props
react-x/no-component-will-update
react-x/no-context-provider
react-x/no-forward-ref
react-x/no-string-refs
The following rules now support auto-fix:
react-x/prefer-namespace-import
react-dom/prefer-namespace-import
The following rules now support suggestion fixes:
react-dom/no-missing-button-type
react-dom/no-missing-iframe-sandbox
react-dom/no-unsafe-target-blank
New configuration preset added:
disable-conflict-eslint-plugin-react
: Disable rules in eslint-plugin-react
that conflict with rules in our pluginsvi.mock(...)
in Vitest test filesuseEffect
setup function check to handle React.useEffect()
calls correctly404.tsx
, _app.tsx
, [slug].tsx
eslint-plugin-react-hooks
eslint-plugin-react
and eslint-react
rulestseslint.config
with defineConfig
in all examplestsup
to tsdown
for better performanceFull Changelog: https://github.com/Rel1cx/eslint-react/compare/v1.53.1...v2.0.0
FAQs
A unified plugin that combines all individual plugins from the eslint-react monorepo into one.
The npm package @eslint-react/eslint-plugin receives a total of 239,387 weekly downloads. As such, @eslint-react/eslint-plugin popularity was classified as popular.
We found that @eslint-react/eslint-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.