
Product
Introducing Scala and Kotlin Support in Socket
Socket now supports Scala and Kotlin, bringing AI-powered threat detection to JVM projects with easy manifest generation and fast, accurate scans.
eslint-config-un
Advanced tools
A universal-ish ESLint config aiming to be reasonably strict and easily configurable.
Grown out of the personal collection of rules, an ESLint config aspiring to cover as many rules as possible, be reasonably strict and easily configurable. Only supports ESLint 9 and the flat config format.
npm i -D eslint-config-un
pnpm i -D eslint-config-un
yarn add -D eslint-config-un
Includes the rules from the following configs & plugins:
eslint-plugin-n
with node
prefix)eslint-plugin-import-x
with import
prefix)typescript
, vue
, nuxt
and pinia
packages and enables corresponding configurations (which can also be enabled or disabled explicitly).overrides
for rules.In your eslint.config.[cm]?js
:
// @ts-check
import {eslintConfig} from 'eslint-config-un';
export default eslintConfig({
// your configuration (optional)
});
eslint>=9
. Please ensure you have installed the correct version. Some package managers are installing non-optional peer dependencies automatically.typescript
or vue
) is performed using local-pkg
..vue
files if enforceTypescriptInScriptSection
is set to true in vue's config options which in turn is automatically set to true if typescript
package found installed. If you have .vue
files authored in both TypeScript and JavaScript, use enforceTypescriptInScriptSection.{files,ignores}
to manually specify TS & JS Vue components respectively. It is not currently possible to apply different ESLint rules depending on the value of lang
attribute of <script>
SFC section.security
.errorsInsteadOfWarnings
option. You can find all such rules by inspecting the source code of this package.rules
: Key disable-autofix/<rule name>
: Could not find <rule name>
in plugin disable-autofix
We disable autofix for some rules in this package via eslint-plugin-disable-autofix
. However, it requires all the configs/plugins packages to be hoisted (installed to the top level of node_modules
). You might need to reinstall this package, re-create node_modules
directory (do not delete your lock file!) or set shamefully-hoist=true
in your .npmrc
if you're using pnpm. Sometimes you'll need to manually install some packages refused to be hoisted (happens with @typescript-eslint/eslint-plugin
: npm i @typescript-eslint/eslint-plugin -D --legacy-peer-deps
);
languageOptions
: Key globals
: Global AudioWorkletGlobalScope
has leading or trailing whitespace.Install globals
package as a dev dependency.
0.0.3
.gitignore
to the list of ignored files..vue
files authored in TypeScript and JavaScript to apply different rules.router-link
, router-view
and Nuxt-specific components to the list of known Vue components.vue/no-boolean-default
rule.prefer-const
rule does not report if any of the destructured variables is reassigned.FAQs
A universal-ish ESLint config aiming to be reasonably strict and easily configurable.
The npm package eslint-config-un receives a total of 104 weekly downloads. As such, eslint-config-un popularity was classified as not popular.
We found that eslint-config-un demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket now supports Scala and Kotlin, bringing AI-powered threat detection to JVM projects with easy manifest generation and fast, accurate scans.
Application Security
/Security News
Socket CEO Feross Aboukhadijeh and a16z partner Joel de la Garza discuss vibe coding, AI-driven software development, and how the rise of LLMs, despite their risks, still points toward a more secure and innovative future.
Research
/Security News
Threat actors hijacked Toptal’s GitHub org, publishing npm packages with malicious payloads that steal tokens and attempt to wipe victim systems.