
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
@ver0/eslint-config
Advanced tools
This config brings together the best ESLint rules and plugins to help you write clean, consistent code. Here's what you get out of the box:
.json, .jsonc, and .json5 files.js, .jsx, .mjs, .cjs.ts, .tsx, .mts, .cts.json, .jsonc, .json5.md.test.*, .benchmark.*yarn add -D @ver0/eslint-config
Setting up your ESLint config is straightforward! The configuration assumes you're using TypeScript and Prettier by default (though you can disable specific features if needed).
// eslint.config.js
import {defineConfig} from 'eslint/config';
import {buildConfig} from '@ver0/eslint-config';
export default defineConfig(
...buildConfig({
globals: 'node',
typescript: true,
typescriptUnsafe: true,
vitest: true,
json: true,
markdown: true,
react: true,
}),
{
files: ['README.md'],
language: 'markdown/gfm',
},
// ... any other configs on your taste...
);
| Option | Type | Default | Description |
|---|---|---|---|
globals | string | 'node' | Required. Environment globals ('node', 'browser', etc.) |
prettier | boolean | true | Enable Prettier integration and formatting rules |
typescript | boolean | true | Enable TypeScript-specific linting rules |
typescriptUnsafe | boolean | false | Disable TypeScript's strict safety rules |
json | boolean | true | Enable JSON/JSONC/JSON5 file linting |
markdown | boolean | true | Enable Markdown file linting |
react | boolean | false | Enable React and JSX-specific rules |
vitest | boolean | false | Enable Vitest testing framework rules |
For a Node.js API project:
// eslint.config.js
import {defineConfig} from 'eslint/config';
import {buildConfig} from '@ver0/eslint-config';
export default defineConfig(
...buildConfig({
globals: 'node',
vitest: true, // if you're using Vitest for testing
}),
// ... any other configs on your taste...
);
For a React web application:
// eslint.config.js
import {defineConfig} from 'eslint/config';
import {buildConfig} from '@ver0/eslint-config';
export default defineConfig(
...buildConfig({
globals: 'browser',
react: true,
vitest: true,
}),
// ... any other configs on your taste...
);
This package also provides opininated default Prettier configuration, that you can extend from.
// .prettierrc.js
import ver0Config from '@ver0/eslint-config/.prettierrc.js';
export default {
...ver0Config,
// Override any settings if needed
// printWidth: 100,
};
For consistent formatting across different editors, you can copy our .editorconfig that is aligned with our Prettier
configuration:
# .editorconfig
[*]
indent_style = tab
tab_width = 2
end_of_line = lf
charset = utf-8
trim_trailing_whitespace = true
insert_final_newline = true
max_line_length = 120
[*.yml]
indent_style = space
indent_size = 2
Rules conflicting with your existing setup? You can override specific rules by adding them after our config:
// eslint.config.js
import {defineConfig} from 'eslint/config';
import {buildConfig} from '@ver0/eslint-config';
export default defineConfig(...buildConfig({globals: 'node'}), {
rules: {
'some-rule': 'off', // Override any rule
},
});
FAQs
ESLint configs used in all ver0 projects
The npm package @ver0/eslint-config receives a total of 157 weekly downloads. As such, @ver0/eslint-config popularity was classified as not popular.
We found that @ver0/eslint-config demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.