
Security News
Meet Socket at Black Hat Europe and BSides London 2025
Socket is heading to London! Stop by our booth or schedule a meeting to see what we've been working on.
@grafana/eslint-plugin-plugins
Advanced tools
eslint-plugin-plugins contains an ESLint rule that checks whether imports from any of the Grafana packages (@grafana/ui, @grafana/data and @grafana/runtime) from within a Grafana plugin source code exist in all the Grafana runtimes that the plugin is supposed to support (as specified in the grafanaDependency in plugin.json).
npm install @grafana/eslint-plugin-plugins --save-dev
To determine the plugin's minimum supported Grafana version, the linter checks the grafanaDependency property in the plugin's plugin.json. By default, it looks for plugin.json in the <projectRoot>/src folder. If the file is located elsewhere or if you're using a monorepo with multiple plugins that have different grafanaDependency values, you can specify minGrafanaVersion directly in the ESLint configuration.
const grafanaPlugins = require('@grafana/eslint-plugin-plugins');
module.exports = [
// ...other configs
{
files: ['src/**/*.{ts,tsx}'],
plugins: { '@grafana/plugins': grafanaPlugins },
rules: {
'@grafana/plugins/import-is-compatible': [
'warn',
// optionally pass the minimum supported version
// { minGrafanaVersion: '10.3.0' },
],
},
},
];
Add the following to your Grafana plugin's .eslintrc:
{
...
"plugins": ["@grafana/eslint-plugin-plugins"],
"rules": {
"@grafana/plugins/import-is-compatible": [
"warn"
// optionally pass the minimum supported version
// { minGrafanaVersion: '10.3.0' },
]
}
}
npm run lint
If your IDE has an ESlint integration that displays errors and warning in the source code, you may need to restart the ESlint server. In VSCode you can run the task ESLint: Restart ESlint Server.
When the ESlint plugin is loaded the first time, it will check the grafanaDependency property in the Grafana plugin's plugin.json file to find the min supported Grafana version. If for example the grafanaDependency is set to >=10.0.2, @grafana/ui@10.0.2, @grafana/data@10.0.2 and @grafana/runtime@10.0.2 will be downloaded to a temp directory on the host machine. It will then check that imports from any of these packages within the plugin source code has a corresponding export in version 10.0.2 of these packages. If not, a problem is reported. It currently ignores member that don't exist at runtime such as types, interfaces and enums.
The import-is-compatible rule only checks backwards compatibility. If a member has been removed in an upcoming release of the Grafana packages, it will not be detected.
Refer to the contributing guidelines.
| Name | Description |
|---|---|
| import-is-compatible | A rule that checks if the imported member is available in all Grafana runtime environments that the plugin supports. |
FAQs
An ESlint plugin with Grafana plugin specific rules
We found that @grafana/eslint-plugin-plugins demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket is heading to London! Stop by our booth or schedule a meeting to see what we've been working on.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.