
Security News
Node.js Homepage Adds Paid Support Link, Prompting Contributor Pushback
A new Node.js homepage button linking to paid support for EOL versions has sparked a heated discussion among contributors and the wider community.
eslint-config-un
Advanced tools
A universal-ish ESLint config aiming to be reasonably strict and easily configurable.
Grown out of the personal collection of rules, an ESLint config aspiring to cover as many rules as possible, be reasonably strict and easily configurable. Only supports ESLint 9 and the flat config format.
npm i -D eslint-config-un
pnpm i -D eslint-config-un
yarn add -D eslint-config-un
Includes the rules from the following configs & plugins:
eslint-plugin-n
with node
prefix)eslint-plugin-import-x
with import
prefix)cssInJs
(since v0.2.0), using eslint-plugin-css
angular
(since v0.7.0), using @angular-eslint/eslint-plugin
and @angular-eslint/eslint-plugin-template
css
(since v0.7.0), using @eslint/css
noUnusedImports
(since v0.7.0), using eslint-plugin-unused-imports
typescript
, vue
, nuxt
, pinia
, jest
, jest-extended
, vitest
, @builder.io/qwik
, @qwik.dev/core
and @angular/core
packages and enables corresponding configurations (which can also be enabled or disabled explicitly).overrides
for rules.In your eslint.config.[cm]?js
:
// @ts-check
import {eslintConfig} from 'eslint-config-un';
export default eslintConfig({
// your configuration (optional)
});
eslint>=9
. Please ensure you have installed the correct version. Some package managers are installing non-optional peer dependencies automatically.typescript
or vue
) is performed using local-pkg
..vue
files if enforceTypescriptInScriptSection
is set to true in vue's config options which in turn is automatically set to true if typescript
package found installed. If you have .vue
files authored in both TypeScript and JavaScript, use enforceTypescriptInScriptSection.{files,ignores}
to manually specify TS & JS Vue components respectively. It is not currently possible to apply different ESLint rules depending on the value of lang
attribute of <script>
SFC section.preferArrowFunctions
security
json
yaml
toml
packageJson
perfectionist
deMorgan
jsonSchemaValidator
errorsInsteadOfWarnings
option. You can find all such rules by inspecting the source code of this package.*.md
filesIf markdown
config is enabled (which is the default), the same rules provided by other configs will be applied to code blocks (```lang ... ```) inside Markdown files. This works because under the hood the plugin @eslint/markdown
that provides that functionality will create virtual files for each code block with the same extension as specified after ```.
But applying certain rules for code blocks might not be desirable because some of them are too strict for the code that won't be executed anyway or even unfixable (like missing imports). You can find the full list of disabled rules in src/configs/markdown.ts
file.
languageOptions
: Key globals
: Global AudioWorkletGlobalScope
has leading or trailing whitespace.Install globals
package as a dev dependency.
0.7.0
angular
via @angular-eslint/eslint-plugin
and @angular-eslint/eslint-plugin-template
, enabled automatically if @angular/core
package is installed and is within the supported version range (from 13 to 19).css
via @eslint/css
, enabled by default unless stylelint
package is installed.allowWithDecorator: true
for @typescript-eslint/no-extraneous-class
rule, mostly to avoid unfixable reports in Angular projects.ts
) is enabled, import/no-deprecated
is now disabled because the corresponding @typescript-eslint
rule works better (in particular, it accounts for function overloads).@typescript-eslint/eslint-plugin
peer dependency of eslint-plugin-jest
and eslint-plugin-unused-imports
to avoid loading a wrong version of it.sonarjs/no-clear-text-protocols
rule severity to warning
because it might produce many false positives.ts
config: added configTypeAware
sub-config to replace filesTypeAware
, ignoresTypeAware
and overridesTypeAware
options. Unless explicitly specified, it will use the same ignores
as the parent config.ts
config: added configNoTypeAssertion
sub-config to replace noTypeAssertion
option.@typescript-eslint/consistent-return
rule in ts
config and disabled the same base rule consistent-return
.autofixToRemoveUnusedImports
option from js
config in favor of a separate unusedImports
config.vue
config: added configA11y
sub-config to replace a11y
and overridesA11y
options.vue
config: added configPinia
sub-config to replace pinia
option.typescript
to configTypescript
in jsdoc
configjsonConfig
to configJson
in jsonc
configjsoncConfig
to configJsonc
in jsonc
configjson5Config
to configJson5
in jsonc
configjestExtended
to configJestExtended
in jest
configtypescript
to configTypescript
in jest
configtypescript-eslint
: 8.26.0 -> 8.26.1@angular-eslint/*
: 19.2.0 -> 19.2.1@vitest/eslint-plugin
: 1.1.36 -> 1.1.37eslint-plugin-de-morgan
: 1.2.0 -> 1.2.1eslint-plugin-jsdoc
: 50.6.3 -> 50.6.6eslint-plugin-perfectionist
: 4.9.0 -> 4.10.1eslint-import-resolver-typescript
: 3.7.0 -> 3.9.1eslint-plugin-import-x
: 4.6.1 -> 4.8.0FAQs
A universal-ish ESLint config aiming to be reasonably strict and easily configurable.
The npm package eslint-config-un receives a total of 428 weekly downloads. As such, eslint-config-un popularity was classified as not popular.
We found that eslint-config-un demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A new Node.js homepage button linking to paid support for EOL versions has sparked a heated discussion among contributors and the wider community.
Research
North Korean threat actors linked to the Contagious Interview campaign return with 35 new malicious npm packages using a stealthy multi-stage malware loader.
Research
Security News
The Socket Research Team investigates a malicious Python typosquat of a popular password library that forces Windows shutdowns when input is incorrect.