
Security News
The Code You Didn't Write Is Still Yours to Defend
AI agents are pulling packages into environments no scanner is watching, creating exposure before security teams can see it.
eslint-plugin-lang3
Advanced tools
ESLint plugin for i18n
npm install eslint-plugin-lang2 --save-dev
Add lang to the plugins section of your .eslintrc configuration file.
{
"plugins": ["lang"]
}
Then configure the rules you want to use under the rules section.
{
"rules": {
"lang/no-literal-string": 2
}
}
or
{
"extends": ["plugin:lang/recommended"]
}
no-literal-stringThis rule aims to avoid developers to display literal string to users in those projects which need to support multi-language.
Note: Disable auto-fix because key in the call
lang.t(key)ussally was not the same as the literal
It will find out all literal strings and validate them.
Examples of incorrect code for this rule:
/*eslint lang/no-literal-string: "error"*/
const a = 'foo';
Examples of correct code for this rule:
/*eslint lang/no-literal-string: "error"*/
// safe to assign string to const variables whose name are UPPER_CASE
var FOO = 'foo';
// UPPER_CASE properties are valid no matter if they are computed or not
var a = {
BAR: 'bar',
[FOO]: 'foo'
};
// also safe to use strings themselves are UPPCASE_CASE
var foo = 'FOO';
This rule allows to call lang translate function.
Correct code:
/*eslint lang/no-literal-string: "error"*/
var bar = lang.t('bar');
var bar2 = i18n.t('bar');
Maybe you use other internationalization libraries not lang. You can use like this:
/*eslint lang/no-literal-string: ["error", { "ignoreCallee": ["yourI18n"] }]*/
const bar = yourI18n('bar');
// or
/*eslint lang/no-literal-string: ["error", { "ignoreCallee": ["yourI18n.method"] }]*/
const bar = yourI18n.method('bar');
All literal strings in html template are typically mistakes. For JSX example:
<div>foo</div>
They should be translated by lang translation api:
<div>{lang.t('foo')}</div>
Same for Vue template:
<!-- incorrect -->
<template>
foo
</template>
<!-- correct -->
<template>
{{ lang.t('foo') }}
</template>
It would allow most reasonable usages of string that would rarely be shown to user, like following examples.
Click on them to see details.
This rule also works with those state managers like Redux and Vuex.
Correct code:
var bar = store.dispatch('bar');
var bar2 = store.commit('bar');
This plugin would not complain on those reasonable usages of string.
The following cases are considered as correct:
var a: Type['member'];
var a: Omit<T, 'key'>;
enum E {
A = 1
}
var a = E['A'];
var a: { t: 'button' } = { t: 'button' };
var a: 'abc' | 'name' = 'abc';
We require type information to work properly, so you need to add some options in your .eslintrc:
"parserOptions": {
// path of your tsconfig.json
"project": "./tsconfig.json"
}
See here for more deteils.
The following cases are allowed:
import mod from 'm';
import('mod');
require('mod');
export { named } from 'm';
export * from 'm';
String comparison is fine.
// correct
name === 'Android' || name === 'iOS';
Skip switchcase statement:
// correct
switch (type) {
case 'foo':
break;
case 'bar':
break;
}
If markupOnly option turn on, only JSX text and strings used as JSX attributes will be validated.
JSX text:
// incorrect
<div>hello world</div>
<div>{"hello world"}</div>
Strings as JSX attribute:
// incorrect
<div foo="foo"></div>
<div foo={"foo"}></div>
Only check the JSX attributes that listed in this option. This option would turn on markupOnly.
// correct
const foo = 'bar';
<div foo="foo"></div>
// incorrect
<div>foo</div>
/*eslint lang/no-literal-string: ["error", {"onlyAttribute": ["foo"]}]*/
// incorrect
<div foo="foo"></div>
The ignore option specifies exceptions not to check for
literal strings that match one of regexp paterns.
Examples of correct code for the { "ignore": ['foo'] } option:
/*eslint lang/no-literal-string: ["error", {"ignore": ["foo"]}]*/
const a = 'afoo';
THe ignoreCallee option speficies exceptions not check for
function calls whose names match one of regexp patterns.
Examples of correct code for the { "ignoreCallee": ["foo"] } option:
/*eslint lang/no-literal-string: ["error", { "ignoreCallee": ["foo"] }]*/
const bar = foo('bar');
The ignoreAttribute option specifies exceptions not to check for JSX attributes that match one of ignored attributes.
Examples of correct code for the { "ignoreAttribute": ["foo"] } option:
/*eslint lang/no-literal-string: ["error", { "ignoreAttribute": ["foo"] }]*/
const element = <div foo="bar" />;
The ignoreProperty option specifies exceptions not to check for object properties that match one of ignored properties.
Examples of correct code for the { "ignoreProperty": ["foo"] } option:
/*eslint lang/no-literal-string: ["error", { "ignoreProperty": ["foo"] }]*/
const a = { foo: 'bar' };
The ignoreComponent option specifies exceptions not to check for string literals inside a list of named components. It includes <Trans> per default.
Examples of correct code for the { "ignoreComponent": ["Icon"] } option:
/*eslint lang/no-literal-string: ["error", { "ignoreComponent": ["Icon"] }]*/
<Icon>arrow<Icon/>
Indicate whether to validate template strings or not. Default false
/*eslint lang/no-literal-string: ["error", { "validateTemplate": true }]*/
// incorrect
var foo = `hello world`;
FAQs
ESLint plugin for i18n.
We found that eslint-plugin-lang3 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
AI agents are pulling packages into environments no scanner is watching, creating exposure before security teams can see it.

Security News
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.