
Security News
Node.js Homepage Adds Paid Support Link, Prompting Contributor Pushback
A new Node.js homepage button linking to paid support for EOL versions has sparked a heated discussion among contributors and the wider community.
eslint-config-un
Advanced tools
A universal-ish ESLint config aiming to be reasonably strict and easily configurable.
Grown out of the personal collection of rules, an ESLint config aspiring to cover as many rules as possible, be reasonably strict and easily configurable. Only supports ESLint 9 and the flat config format.
npm i -D eslint-config-un
pnpm i -D eslint-config-un
yarn add -D eslint-config-un
Includes the rules from the following configs & plugins:
eslint-plugin-n
with node
prefix)eslint-plugin-import-x
with import
prefix)typescript
, vue
, nuxt
, pinia
, jest
, jest-extended
, vitest
, @builder.io/qwik
and @qwik.dev/core
packages and enables corresponding configurations (which can also be enabled or disabled explicitly).overrides
for rules.In your eslint.config.[cm]?js
:
// @ts-check
import {eslintConfig} from 'eslint-config-un';
export default eslintConfig({
// your configuration (optional)
});
eslint>=9
. Please ensure you have installed the correct version. Some package managers are installing non-optional peer dependencies automatically.typescript
or vue
) is performed using local-pkg
..vue
files if enforceTypescriptInScriptSection
is set to true in vue's config options which in turn is automatically set to true if typescript
package found installed. If you have .vue
files authored in both TypeScript and JavaScript, use enforceTypescriptInScriptSection.{files,ignores}
to manually specify TS & JS Vue components respectively. It is not currently possible to apply different ESLint rules depending on the value of lang
attribute of <script>
SFC section.preferArrowFunctions
security
json
yaml
toml
packageJson
perfectionist
deMorgan
jsonSchemaValidator
errorsInsteadOfWarnings
option. You can find all such rules by inspecting the source code of this package.*.md
filesIf markdown
config is enabled (which is the default), the same rules provided by other configs will be applied to code blocks (```lang ... ```) inside Markdown files. This works because under the hood the plugin @eslint/markdown
that provides that functionality will create virtual files for each code block with the same extension as specified after ```.
But applying certain rules for code blocks might not be desirable because some of them are too strict for the code that won't be executed anyway or even unfixable (like missing imports). You can find the full list of disabled rules in src/configs/markdown.ts
file.
languageOptions
: Key globals
: Global AudioWorkletGlobalScope
has leading or trailing whitespace.Install globals
package as a dev dependency.
0.6.1
project: '*/tsconfig*.json'
by default in eslint-import-resolver-typescript
resolver for import
config to avoid resolution issues in repositories with multiple tsconfigs (upstream issue). Added an option to override the resolver settings.overrides['eslint-processor-vue-blocks']['@vue/compiler-sfc']
to v3 in package.json
to potentially avoid "Preprocessing error: Cannot read properties of undefined (reading 'styles')" error during Vue files linting, caused by @vue/compiler-sfc
resolved to a different major version.@stylistic/eslint-plugin
: 4.1.0 -> 4.2.0eslint-plugin-package-json
: 0.26.0 -> 0.26.1eslint-plugin-n
: 17.15.1 -> 17.16.1FAQs
A universal-ish ESLint config aiming to be reasonably strict and easily configurable.
The npm package eslint-config-un receives a total of 512 weekly downloads. As such, eslint-config-un popularity was classified as not popular.
We found that eslint-config-un demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A new Node.js homepage button linking to paid support for EOL versions has sparked a heated discussion among contributors and the wider community.
Research
North Korean threat actors linked to the Contagious Interview campaign return with 35 new malicious npm packages using a stealthy multi-stage malware loader.
Research
Security News
The Socket Research Team investigates a malicious Python typosquat of a popular password library that forces Windows shutdowns when input is incorrect.