
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
@eslint/json
Advanced tools
This package contains a plugin that allows you to natively lint JSON, JSONC, and JSON5 files using ESLint.
Important: This plugin requires ESLint v9.15.0 or higher and you must be using the new configuration system.
For Node.js and compatible runtimes:
npm install @eslint/json -D
# or
yarn add @eslint/json -D
# or
pnpm install @eslint/json -D
# or
bun add @eslint/json -D
For Deno:
deno add @eslint/json
This package exports these languages:
"json/json" is for regular JSON files"json/jsonc" is for JSON files that support comments (JSONC) such as those used for Visual Studio Code configuration files"json/json5" is for JSON5 filesDepending on which types of JSON files you'd like to lint, you can set up your eslint.config.js file to include just the files you'd like. Here's an example that lints JSON, JSONC, and JSON5 files:
// eslint.config.js
import { defineConfig } from "eslint/config";
import json from "@eslint/json";
export default defineConfig([
{
plugins: {
json,
},
},
// lint JSON files
{
files: ["**/*.json"],
language: "json/json",
rules: {
"json/no-duplicate-keys": "error",
},
},
// lint JSONC files
{
files: ["**/*.jsonc", ".vscode/*.json"],
language: "json/jsonc",
rules: {
"json/no-duplicate-keys": "error",
},
},
// lint JSON5 files
{
files: ["**/*.json5"],
language: "json/json5",
rules: {
"json/no-duplicate-keys": "error",
},
},
]);
In CommonJS format:
// eslint.config.js
const { defineConfig } = require("eslint/config");
const json = require("@eslint/json").default;
module.exports = defineConfig([
{
plugins: {
json,
},
},
// lint JSON files
{
files: ["**/*.json"],
language: "json/json",
rules: {
"json/no-duplicate-keys": "error",
},
},
// lint JSONC files
{
files: ["**/*.jsonc", ".vscode/*.json"],
language: "json/jsonc",
rules: {
"json/no-duplicate-keys": "error",
},
},
// lint JSON5 files
{
files: ["**/*.json5"],
language: "json/json5",
rules: {
"json/no-duplicate-keys": "error",
},
},
]);
To use the recommended configuration for this plugin, specify your matching files and then use the extends: ["json/recommended"] property, like this:
// eslint.config.js
import { defineConfig } from "eslint/config";
import json from "@eslint/json";
export default defineConfig([
// lint JSON files
{
files: ["**/*.json"],
ignores: ["package-lock.json"],
plugins: { json },
language: "json/json",
extends: ["json/recommended"],
},
// lint JSONC files
{
files: ["**/*.jsonc"],
plugins: { json },
language: "json/jsonc",
extends: ["json/recommended"],
},
// lint JSON5 files
{
files: ["**/*.json5"],
plugins: { json },
language: "json/json5",
extends: ["json/recommended"],
},
]);
Note: You generally want to ignore package-lock.json because it is auto-generated and you typically will not want to manually make changes to it.
| Rule Name | Description | Recommended |
|---|---|---|
no-duplicate-keys | Disallow duplicate keys in JSON objects | yes |
no-empty-keys | Disallow empty keys in JSON objects | yes |
no-unnormalized-keys | Disallow JSON keys that are not normalized | yes |
no-unsafe-values | Disallow JSON values that are unsafe for interchange | yes |
sort-keys | Require JSON object keys to be sorted | no |
top-level-interop | Require the JSON top-level value to be an array or object | no |
In JSONC and JSON5 files, you can also use rule configurations comments and disable directives.
/* eslint json/no-empty-keys: "error" */
{
"foo": {
"": 1, // eslint-disable-line json/no-empty-keys -- We want an empty key here
},
"bar": {
// eslint-disable-next-line json/no-empty-keys -- We want an empty key here too
"": 2,
},
/* eslint-disable json/no-empty-keys -- Empty keys are allowed in the following code as well */
"baz": [
{
"": 3,
},
{
"": 4,
},
],
/* eslint-enable json/no-empty-keys -- re-enable now */
}
Both line and block comments can be used for all kinds of configuration comments.
The Microsoft implementation of JSONC optionally allows for trailing commas in objects and arrays (files like tsconfig.json have this option enabled by default in Visual Studio Code). To enable trailing commas in JSONC files, use the allowTrailingCommas language option, as in this example:
// eslint.config.js
import { defineConfig } from "eslint/config";
import json from "@eslint/json";
export default defineConfig([
// lint JSONC files
{
files: ["**/*.jsonc"],
plugins: { json },
language: "json/jsonc",
extends: ["json/recommended"],
},
// lint JSONC files and allow trailing commas
{
files: ["**/tsconfig.json", ".vscode/*.json"],
plugins: { json },
language: "json/jsonc",
languageOptions: {
allowTrailingCommas: true,
},
extends: ["json/recommended"],
},
]);
Note: The allowTrailingCommas option is only valid for the json/jsonc language.
eslint-plugin-json and eslint-plugin-jsonc?This plugin implements JSON parsing for ESLint using the language plugins API, which is the official way of supporting non-JavaScript languages in ESLint. This differs from the other plugins:
eslint-plugin-json uses a processor to parse the JSON, meaning it doesn't create an AST and you can't write custom rules for it.eslint-plugin-jsonc uses a parser that still goes through the JavaScript linting functionality and requires several rules to disallow valid JavaScript syntax that is invalid in JSON.As such, this plugin is more robust and faster than the others. You can write your own custom rules when using the languages in this plugin, too.
eslint-plugin-json and eslint-plugin-jsonc?Most of the rules in eslint-plugin-json are actually syntax errors that are caught automatically by the parser used in this plugin.
Similarly, many of the rules in eslint-plugin-jsonc specifically disallow valid JavaScript syntax that is invalid in the context of JSON. These are also automatically caught by the parser in this plugin.
Any other rules that catch potential problems in JSON are welcome to be implemented. You can open an issue to propose a new rule.
First, ensure you have the ESLint plugin installed.
Then, edit eslint.validate in your settings.json file to include json, jsonc, and json5:
{
"eslint.validate": ["json", "jsonc", "json5"]
}
For any JetBrains WebStorm, configure the ESLint scope to include json, jsonc, and json5, such as:
**/*.{js,ts,jsx,tsx,cjs,cts,mjs,mts,html,vue,json,jsonc,json5}
Apache 2.0
The following companies, organizations, and individuals support ESLint's ongoing maintenance and development. Become a Sponsor to get your logo on our READMEs and website.
FAQs
JSON linting plugin for ESLint
The npm package @eslint/json receives a total of 257,402 weekly downloads. As such, @eslint/json popularity was classified as popular.
We found that @eslint/json demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.