
Product
Introducing Socket Scanning for VS Code Marketplace Extensions
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.
@tsrx/core
Advanced tools
TypeScript Render Extensions (TSRX) — the shared parser and compiler infrastructure that powers TypeScript UI frameworks.
@tsrx/core is framework-agnostic. It provides the parser, AST definitions, scope
analysis, and code-generation utilities needed to target any framework runtime
using TSRX syntax. Framework-specific packages—such as
@tsrx/react, @tsrx/solid, and the external
@tsrx/ripple—build on @tsrx/core to
produce target-runtime output.
TSRX is an extension to TypeScript's syntax — in the same spirit that JSX is an extension to JavaScript. It adds a small set of orthogonal syntactic forms that are ergonomic for describing reactive UI, and leaves the semantics of those forms to the consuming framework.
A .tsrx file is a TypeScript module with TSRX enabled.
pnpm add @tsrx/core
import { analyzeTsrx, parseModule } from '@tsrx/core';
const ast = parseModule(source, 'App.tsrx');
const analysis = analyzeTsrx(ast, 'App.tsrx');
The parser produces an ESTree-compatible AST, augmented with the TSRX node types listed below. Framework compilers walk this AST to emit their own output.
The TSRX website is the canonical source for language documentation:
Keeping the language reference on the website avoids duplicating the specification here and keeps package docs focused on the core parser API.
@tsrx/core providesparseModule(source, filename, options?) — parse a TSRX module into an
ESTree AST.analyzeTsrx(ast, filename, options?) — run target-neutral semantic
validation before framework analysis or transformation. Pass collect: true,
typeOnly: true, or to_ts: true to collect non-fatal diagnostics for
editor/type-only output.createScopes, Scope, ScopeRoot, binding tracking
(import, prop, let, const, function, for_pattern, …).parseStyle, analyzeCss, renderStylesheets. CSS node
offsets are relative to the style body; a sheet parsed with a body origin
(every sheet parseModule produces) records sourceStart and a file-relative
loc, and analyzeCss anchors its :global placement diagnostics on the
selector with file-relative positions. Pass { errors, comments } to collect
them instead of throwing.analyzeTsrx resolves every <style> block. A standalone
block is a child of an element or fragment and is scoped to its siblings: it
styles the items beside it and everything below them, never the element that
contains it, and the compiler adds a hash class to those elements so the block's
selectors match only there. A block is an output node, so a block that is the
lone output of a @{ … } or control-flow body is
STYLE_STANDALONE_NEEDS_FRAGMENT. Raw CSS is TSRX template syntax, so a block
with CSS in it outside every @{ … }/control-flow body is
STYLE_STANDALONE_OUTSIDE_TEMPLATE; plain-TSX <style>{css}</style> is an
ordinary element. Assigned blocks (const theme = <style>…</style>) are
classified as theme (exported, applied, or $class read) or class-map, and
apply targets are resolved through real bindings, declared before use. Results
ride on each block's metadata (styleKind, styleApplies, styleApplied,
styleExported) and on program.metadata.styles, and the analysis result
exposes scopes. Target compilers use prepareStylesheetForRender(sheet, mode)
with mode: 'scope' | 'class-map' | 'theme' (a boolean still means
class-map/scope) and createStyleClassMapFromStylesheet(sheet, options),
whose object starts with $class and accepts { applied } for composed themes.
Style diagnostics use the STYLE_*, CSS_GLOBAL_PLACEMENT, and CSS_IMPORT
codes in DIAGNOSTIC_CODES.isVoidElement, isBooleanAttribute, isDomProperty,
validateNesting.isSvgTagName(name) and isMathmlTagName(name) check
case-sensitive membership in the tag-name sets used for ref types. These are
namespace-independent checks: isSvgTagName includes names shared with HTML
(a, title, script, and style), even though ref-type inference prefers
HTML for those names when no SVG namespace is provided. Target compilers can use
these checks when choosing safe lowering behavior without a known namespace.convertSourceMapToMappings.See src/index.js for the full exported surface.
@tsrx/core does not emit runtime code. Code generation lives in framework
packages (e.g. @tsrx/ripple).@tsrx/core does not ship a runtime. There is no reactivity, rendering, or
DOM code here.@tsrx/core does not lock consumers to a specific output format. Multiple
compile targets can share the same parser and analysis.MIT © Dominic Gannaway
FAQs
Core compiler infrastructure for TSRX syntax
The npm package @tsrx/core receives a total of 33,000 weekly downloads. As such, @tsrx/core popularity was classified as popular.
We found that @tsrx/core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.

Product
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.

Research
/Security News
Socket uncovered two malicious VS Code themes in a GlassWorm-linked cluster with thousands of installs across VS Code Marketplace and Open VSX.

Security News
/Company News
Capital One is partnering with Socket to proactively secure its open source supply chain.