
Security News
npm Adopts OIDC for Trusted Publishing in CI/CD Workflows
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
eslint-config-un
Advanced tools
A universal-ish ESLint config aiming to be reasonably strict and easily configurable.
Supply Chain Security
Vulnerability
Quality
Maintenance
License
Grown out of the personal collection of rules, an ESLint config aspiring to cover as many rules as possible, be reasonably strict and easily configurable. Only supports ESLint 9 and the flat config format.
npm i -D eslint-config-un
pnpm i -D eslint-config-un
yarn add -D eslint-config-un
Includes the rules from the following configs & plugins:
eslint-plugin-n
with node
prefix)eslint-plugin-import-x
with import
prefix)typescript
, vue
, nuxt
, pinia
, jest
, jest-extended
, vitest
, @builder.io/qwik
and @qwik.dev/core
packages and enables corresponding configurations (which can also be enabled or disabled explicitly).overrides
for rules.In your eslint.config.[cm]?js
:
// @ts-check
import {eslintConfig} from 'eslint-config-un';
export default eslintConfig({
// your configuration (optional)
});
eslint>=9
. Please ensure you have installed the correct version. Some package managers are installing non-optional peer dependencies automatically.typescript
or vue
) is performed using local-pkg
..vue
files if enforceTypescriptInScriptSection
is set to true in vue's config options which in turn is automatically set to true if typescript
package found installed. If you have .vue
files authored in both TypeScript and JavaScript, use enforceTypescriptInScriptSection.{files,ignores}
to manually specify TS & JS Vue components respectively. It is not currently possible to apply different ESLint rules depending on the value of lang
attribute of <script>
SFC section.preferArrowFunctions
security
json
yaml
toml
packageJson
perfectionist
deMorgan
jsonSchemaValidator
errorsInsteadOfWarnings
option. You can find all such rules by inspecting the source code of this package.*.md
filesIf markdown
config is enabled (which is the default), the same rules provided by other configs will be applied to code blocks (```lang ... ```) inside Markdown files. This works because under the hood the plugin @eslint/markdown
that provides that functionality will create virtual files for each code block with the same extension as specified after ```.
But applying certain rules for code blocks might not be desirable because some of them are too strict for the code that won't be executed anyway or even unfixable (like missing imports). You can find the full list of disabled rules in src/configs/markdown.ts
file.
languageOptions
: Key globals
: Global AudioWorkletGlobalScope
has leading or trailing whitespace.Install globals
package as a dev dependency.
0.6.2
eslint-import-resolver-typescript
to v3.7.0 due to this issue.ignoreOverloadsWithDifferentJSDoc: true
for @typescript-eslint/unified-signatures
rule.@stylistic/eslint-plugin
: 3.8.3 -> 3.7.0typescript-eslint
: 8.25.0 -> 8.26.0@eslint/markdown
: 6.2.2 -> 6.3.0eslint-config-prettier
: 10.0.2 -> 10.1.1eslint-plugin-n:
17.16.1 -> 17.16.2eslint-plugin-package-json
: 0.26.1 -> 0.26.3eslint-plugin-vue
: 9.32.0 -> 10.0.0
no-import-compiler-macros
vue-eslint-parser
: 9.4.3 -> 10.1.1FAQs
A universal-ish ESLint config aiming to be reasonably strict and easily configurable.
The npm package eslint-config-un receives a total of 34 weekly downloads. As such, eslint-config-un popularity was classified as not popular.
We found that eslint-config-un demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.