
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
The official OXC integration for TSRX — Rust-native Oxlint and Oxfmt for .tsrx, JavaScript, TypeScript, and JSX
The official OXC integration for TSRX. @tsrx/oxc gives you three tools for
.tsrx files:
A .tsrx file is TypeScript with HTML-like markup in it, plus blocks like @if
and @for for showing something only sometimes, or once per item in a list.
OXC is a set of fast tools for JavaScript and TypeScript,
written in Rust. This package teaches them to read .tsrx too.
OXC for TSRX is the official OXC integration maintained by the TSRX project.
Docs · Getting started · Playground
npm install --save-dev @tsrx/oxc
That is the whole setup, for the command line and for your editor. You get
oxlint and oxfmt, the real OXC commands, now able to read
.tsrx, with no config file, no ignore file, and no install script. Vite+ needs
one more command.
You do not need Rust installed: the install downloads a ready-built program for your machine, one of eight published for macOS, Linux, and Windows. See Platform support.
npx oxlint src/Cart.tsrx # Lint the file.
npx oxfmt --check src/Cart.tsrx # Show what formatting would change.
npx oxfmt --write src/Cart.tsrx # Apply it.
Always give these commands a path. A bare npx oxlint also checks
node_modules, and --fix (the flag that lets oxlint edit your files) will
rewrite files in there.
Your .js, .jsx, .ts, and .tsx files go straight to OXC, exactly as they
would without this package. Only .tsrx files do anything TSRX-specific.
These are the TSRX blocks the linter and formatter understand: @{ blocks,
@if / @else if / @else, @for / @empty, @switch / @case /
@default, @try / @pending / @catch, tags whose name is an expression,
<{expression}>, and plain <style> blocks
(TSRX syntax shows each one). Anything
outside that list fails closed: the command stops and says what it found and
where, rather than guessing and maybe producing wrong output.
This package compiles nothing. It never builds or runs your app. Turning
.tsrx into something a browser can run is your framework's TSRX plugin's job,
such as @tsrx/vite-plugin-react. See
tsrx.dev/getting-started. Without one, your
build tool reads .tsrx as plain TypeScript and stops at the first @{.
Install the official OXC extension, oxc.oxc-vscode. With @tsrx/oxc in the
project there is nothing else to install or configure, and your editor
underlines the same problems the terminal reports. One catch: the TSRX
toolchain's own extension owns .tsrx, and the OXC extension lists no
activation event for it, so it does not start on its own. Open any JavaScript,
TypeScript, or JSON file in the project once, and .tsrx works for the rest of
the session. See the editor guide.
import { parseSync } from "@tsrx/oxc/parser";
import { defineConfig } from "@tsrx/oxc/lint";
import { format } from "@tsrx/oxc/format";
The parser hands back the structure of your file and the formatter hands back
tidied text, so you can build your own tools on the same reader the commands
use. Parsing has the shape it returns.
None of these compiles .tsrx either; that stays your framework's TSRX
plugin's job.
Framework compilers that currently call @tsrx/core's parser can use the
compatibility facade from the same package:
import { parseModule } from "@tsrx/oxc/tsrx-core-compat";
It preserves TypeScript fields and supplies the source locations, directive
keyword origins, comments, and complete scoped-CSS tree expected by
@tsrx/core consumers.
A plugin listed in jsPlugins runs on .tsrx from the oxlint command and
inside your editor, but it sees a translated copy of your file rather than the
TSRX you wrote, so each .tsrx file is read once more. The command and the
editor both say when they have done that, and
settings.oxcTsrx.jsPluginsOnTsrx: false turns it off.
oxc-tsrx-lint, the standalone Rust command, has no Node.js to run a plugin in,
so it refuses jsPlugins and names oxlint as the command that can.
@tsrx/oxc/lint/plugins-dev is for writing a plugin, since it re-exports the
RuleTester from oxlint. See Custom JavaScript
plugins.
oxc.provider block, what reads it today, and how a plain install reaches released hosts.@tsrx/oxc is the only package to depend on. The eight @tsrx/oxc-*
packages are platform binaries in optionalDependencies, and you never name one
yourself.
MIT.
FAQs
The official OXC integration for TSRX — Rust-native Oxlint and Oxfmt for .tsrx, JavaScript, TypeScript, and JSX
The npm package @tsrx/oxc receives a total of 411 weekly downloads. As such, @tsrx/oxc popularity was classified as not popular.
We found that @tsrx/oxc demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.