
Company News
Socket Has Acquired Secure Annex
Socket has acquired Secure Annex to expand extension security across browsers, IDEs, and AI tools.
@wordpress/eslint-plugin
Advanced tools
ESLint plugin including configurations and custom rules for WordPress development.
Install the module
npm install @wordpress/eslint-plugin --save-dev
Note: This package requires Node.js version with long-term support status (check Active LTS or Maintenance LTS releases). It is not compatible with older versions.
Create an eslint.config.mjs file in your project root:
import wordpress from '@wordpress/eslint-plugin';
export default [ ...wordpress.configs.recommended ];
You can add your own overrides after the spread:
import wordpress from '@wordpress/eslint-plugin';
export default [
...wordpress.configs.recommended,
{
rules: {
// your custom rule overrides
},
},
];
Refer to the ESLint flat config documentation for more information.
If you are still using ESLint v9 with the legacy .eslintrc.* format, a compatibility wrapper is available:
// .eslintrc.js
const wordpress = require( '@wordpress/eslint-plugin/eslintrc' );
module.exports = wordpress.configs.recommended;
Note: The eslintrc wrapper is deprecated and will be removed in a future major version. Please migrate to flat config.
The recommended preset will include rules governing an ES2015+ environment, and includes rules from the eslint-plugin-jsdoc, eslint-plugin-jsx-a11y, eslint-plugin-react, and other similar plugins.
This preset offers an optional integration with the eslint-plugin-prettier package that runs Prettier code formatter and reports differences as individual ESLint issues. You can activate it by installing the prettier package separately with:
npm install prettier --save-dev
Finally, this ruleset also includes an optional integration with the @typescript-eslint/eslint-plugin package that enables ESLint to support TypeScript language. You can activate it by installing the typescript package separately with:
npm install typescript --save-dev
There is also recommended-with-formatting ruleset for projects that want to ensure that Prettier and TypeScript integration is never activated. This preset has the native ESLint code formatting rules enabled instead.
Alternatively, you can opt-in to only the more granular rulesets offered by the plugin. These include:
custom – custom rules for WordPress development.es5 – rules for legacy ES5 environments.esnext – rules for ES2015+ environments.i18n – rules for internationalization.jsdoc – rules for JSDoc comments.jsx-a11y – rules for accessibility in JSX.react – rules for React components.test-e2e – rules for end-to-end tests written in Puppeteer.test-unit– rules for unit tests written in Jest.test-playwright – rules for end-to-end tests written in Playwright.For example, if your project does not use React, you could use only the ESNext rules:
// eslint.config.mjs
import wordpress from '@wordpress/eslint-plugin';
export default [ ...wordpress.configs.esnext ];
These rules can be used additively, so you could spread both esnext and custom rulesets, but omit the react and jsx-a11y configurations.
The granular rulesets will not define any environment globals. As such, if they are required for your project, you will need to define them yourself.
| Rule | Description | Recommended |
|---|---|---|
| data-no-store-string-literals | Discourage passing string literals to reference data stores. | |
| dependency-group | Enforce dependencies docblocks formatting. | |
| i18n-ellipsis | Disallow using three dots in translatable strings. | ✓ |
| i18n-hyphenated-range | Disallow hyphenated numerical ranges in translatable strings. | |
| i18n-no-collapsible-whitespace | Disallow collapsible whitespace in translatable strings. | ✓ |
| i18n-no-flanking-whitespace | Disallow leading or trailing whitespace in translatable strings. | |
| i18n-no-placeholders-only | Prevent using only placeholders in translatable strings. | ✓ |
| i18n-no-variables | Enforce string literals as translation function arguments. | ✓ |
| i18n-text-domain | Enforce passing valid text domains. | ✓ |
| i18n-translator-comments | Enforce adding translator comments. | ✓ |
| no-base-control-with-label-without-id | Disallow the usage of BaseControl component with a label prop set but omitting the id property. | ✓ |
| no-dom-globals-in-constructor | Disallow use of DOM globals in class constructors. | |
| no-dom-globals-in-module-scope | Disallow use of DOM globals in module scope. | |
| no-dom-globals-in-react-cc-render | Disallow use of DOM globals in React class component render methods. | |
| no-dom-globals-in-react-fc | Disallow use of DOM globals in the render cycle of a React function component. | |
| components-no-missing-40px-size-prop | Disallow missing __next40pxDefaultSize prop on @wordpress/components components. | ✓ |
| components-no-unsafe-button-disabled | Disallow using disabled on Button without accessibleWhenDisabled. | ✓ |
| no-i18n-in-save | Disallow translation functions in block save methods. | |
| no-unmerged-classname | Disallow unmerged className in components that spread rest props. | |
| no-unguarded-get-range-at | Disallow the usage of unguarded getRangeAt calls. | ✓ |
| no-unsafe-wp-apis | Disallow the usage of unsafe APIs from @wordpress/* packages | ✓ |
| use-recommended-components | Encourage the use of recommended UI components in a WordPress environment. | |
| no-unused-vars-before-return | Disallow assigning variable values if unused before a return. | ✓ |
| no-wp-process-env | Disallow legacy usage of WordPress variables via process.env like process.env.SCRIPT_DEBUG. | ✓ |
| react-no-unsafe-timeout | Disallow unsafe setTimeout in component. | |
| valid-sprintf | Enforce valid sprintf usage. | ✓ |
| wp-global-usage | Enforce correct usage of WordPress globals like globalThis.SCRIPT_DEBUG. |
If you are upgrading from a previous version that used .eslintrc.* files:
.eslintrc.* file with an eslint.config.mjs file.extends arrays to import + spread:
// Old (.eslintrc.js)
module.exports = {
extends: [ 'plugin:@wordpress/eslint-plugin/recommended' ],
};
// New (eslint.config.mjs)
import wordpress from '@wordpress/eslint-plugin';
export default [ ...wordpress.configs.recommended ];
overrides to separate config objects with files patterns.env with languageOptions.globals using the globals package..eslintignore file and move patterns into an ignores config object.See the ESLint migration guide for full details.
This is an individual package that's part of the Gutenberg project. The project is organized as a monorepo. It's made up of multiple self-contained software packages, each with a specific purpose. The packages in this monorepo are published to npm and used by WordPress as well as other software projects.
To find out more about contributing to this package or Gutenberg as a whole, please read the project's main contributor guide.

FAQs
ESLint plugin for WordPress development.
The npm package @wordpress/eslint-plugin receives a total of 103,820 weekly downloads. As such, @wordpress/eslint-plugin popularity was classified as popular.
We found that @wordpress/eslint-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 23 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket has acquired Secure Annex to expand extension security across browsers, IDEs, and AI tools.

Research
/Security News
Socket is tracking cloned Open VSX extensions tied to GlassWorm, with several updated from benign-looking sleepers into malware delivery vehicles.

Product
Reachability analysis for PHP is now available in experimental, helping teams identify which vulnerabilities are actually exploitable.