
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
@metamask/eslint-config-typescript
Advanced tools
@metamask/eslint-config-typescriptMetaMask's TypeScript ESLint configuration.
yarn add --dev \
@metamask/eslint-config@^14.0.0 \
@metamask/eslint-config-typescript@^14.0.0 \
eslint@^9.11.0 \
eslint-config-prettier@^9.1.0 \
eslint-plugin-import-x@^4.3.0 \
eslint-plugin-jsdoc@^50.2.4 \
eslint-plugin-prettier@^5.2.1 \
eslint-plugin-promise@^7.1.0 \
prettier@^3.3.3 \
typescript@~5.8.0 \
typescript-eslint@^8.28.0
The order in which you extend ESLint rules matters.
The @metamask/* eslint configs should be added to the config array last,
with @metamask/eslint-config first, and @metamask/eslint-config-* in any
order thereafter.
import base, { createConfig } from '@metamask/eslint-config';
import typescript from '@metamask/eslint-config-typescript';
const config = createConfig({
{
// The TypeScript config disables certain rules that you want to keep for
// non-TypeScript files, so it should be added in an override.
files: ['**/*.ts', '**/*.mts', '**/*.cts'],
extends: [
// Any custom shared config should be added here.
// ...
// This should be added last unless you know what you're doing.
...base,
...typescript,
],
languageOptions: {
parserOptions: {
// This is required for rules that use type information.
// See here for more information: https://typescript-eslint.io/getting-started/typed-linting
tsconfigRootDir: import.meta.dirname,
},
},
}
});
FAQs
Shareable MetaMask ESLint config for TypeScript.
The npm package @metamask/eslint-config-typescript receives a total of 70,615 weekly downloads. As such, @metamask/eslint-config-typescript popularity was classified as popular.
We found that @metamask/eslint-config-typescript demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.