
Security News
Meet Socket at Black Hat Europe and BSides London 2025
Socket is heading to London! Stop by our booth or schedule a meeting to see what we've been working on.
@fimbul/valtyr
Advanced tools
Wotan module to lint according to your existing tslint.json and tslint:disable comments.
Make sure to also read the full documentation of all available modules.
Drop-in replacement for TSLint. Uses your existing tslint.json files, loads TSLint rules and formatters and honors tslint:disable comments.
npm install --save-dev @fimbul/wotan @fimbul/valtyr
# or
yarn add -D @fimbul/wotan @fimbul/valtyr
wotan -m @fimbul/valtyr
The -m @fimbul/valtyr argument enables this package. It searches tslint.json (or tslint.yaml) files for configuration like TSLint does. It loads TSLint core rules as well as custom rules with the same rules as TSLint. It uses TSLint formatters to format the result.
There are only minor differences:
stylish formatter is used by default*.d.ts in your project are included by defaultBecause tslint.json has no field to configure processors, you need to configure them in a separate file.
Create a file named .fimbullinter.yaml. If it already exists, simply add the new cofiguration under the valtyr key.
The following example shows how to enable a processor for .vue files:
valtyr:
overrides:
- files: "*.vue"
processor: "@fimbul/ve"
Note that the configuration for valtyr can only contain overrides, settings and processor. Everything else is not supported and will result in an error.
Why should you use Wotan to execute TSLint rules?
-p flag.-c, e.g. -c tslint:latest or -c tslint-config-airbnb.tslint:disable comments faster with less overhead, especially in big files.tslint:disable comments with --report-useless-directives CLI option.references./* tslint:disable-line */ // tslint:disable. Since this pattern doesn't make sense most cases this shouldn't be noticeable.This package allows you to use your existing TSLint configuration. On the other hand you cannot use any of the builtin rules of Wotan or all those other useful configuration features like overrides, aliases, etc. If you want to lint with your existing TSLint config and your new Wotan config, you need to run Wotan twice, which adds a lot of overhead.
Heimdall requires you to rewrite your linter configuration and switch to .wotanrc.yaml (or .wotanrc.json if you like that better).
In return you can use Wotans fully optimized builtin rules as well as all the other cool features.
Heimdall allows you to execute Wotan and TSLint rules in one single run.
Apache-2.0 © Klaus Meinhardt
v0.24.0
:tada: This release contains two major features: caching and code fixes in the LanguageService plugin.
:warning: Breaking Changes:
The changes in the LanguageService plugin require that you update the @fimbul/mithotyn dependency and the fimbullinter.vscode-plugin VSCode plugin if you were using one of them.
Features:
no-object-spread-of-iterable warns about spreading an array into an objectno-implicit-tostring warns about implicit string coercion of certain types--cache enables caching for fast incremental linting. Read more about cachingFAQs
Wotan plugin to behave almost like TSLint
The npm package @fimbul/valtyr receives a total of 210 weekly downloads. As such, @fimbul/valtyr popularity was classified as not popular.
We found that @fimbul/valtyr demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket is heading to London! Stop by our booth or schedule a meeting to see what we've been working on.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.