🚨 Shai-Hulud Strikes Again:834 Packages Compromised.Technical Analysis β†’
Socket
Book a DemoInstallSign in
Socket

eslint-plugin-react

Package Overview
Dependencies
Maintainers
2
Versions
216
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

eslint-plugin-react

React specific linting rules for ESLint

latest
Source
npmnpm
Version
7.37.5
Version published
Weekly downloads
32M
9.01%
Maintainers
2
Weekly downloads
Β 
Created
Source

eslint-plugin-react Version Badge

===================

github actions Maintenance Status NPM version Tidelift

React specific linting rules for eslint

Installation

npm install eslint eslint-plugin-react --save-dev

It is also possible to install ESLint globally rather than locally (using npm install -g eslint). However, this is not recommended, and any plugins or shareable configs that you use must be installed locally in either case.

Configuration (legacy: .eslintrc*)

Use our preset to get reasonable defaults:

  "extends": [
    "eslint:recommended",
    "plugin:react/recommended"
  ]

If you are using the new JSX transform from React 17, extend react/jsx-runtime in your eslint config (add "plugin:react/jsx-runtime" to "extends") to disable the relevant rules.

You should also specify settings that will be shared across all the plugin rules. (More about eslint shared settings)

{
  "settings": {
    "react": {
      "createClass": "createReactClass", // Regex for Component Factory to use,
                                         // default to "createReactClass"
      "pragma": "React",  // Pragma to use, default to "React"
      "fragment": "Fragment",  // Fragment to use (may be a property of <pragma>), default to "Fragment"
      "version": "detect", // React version. "detect" automatically picks the version you have installed.
                           // You can also use `16.0`, `16.3`, etc, if you want to override the detected value.
                           // Defaults to the "defaultVersion" setting and warns if missing, and to "detect" in the future
      "defaultVersion": "", // Default React version to use when the version you have installed cannot be detected.
                            // If not provided, defaults to the latest React version.
      "flowVersion": "0.53" // Flow version
    },
    "propWrapperFunctions": [
        // The names of any function used to wrap propTypes, e.g. `forbidExtraProps`. If this isn't set, any propTypes wrapped in a function will be skipped.
        "forbidExtraProps",
        {"property": "freeze", "object": "Object"},
        {"property": "myFavoriteWrapper"},
        // for rules that check exact prop wrappers
        {"property": "forbidExtraProps", "exact": true}
    ],
    "componentWrapperFunctions": [
        // The name of any function used to wrap components, e.g. Mobx `observer` function. If this isn't set, components wrapped by these functions will be skipped.
        "observer", // `property`
        {"property": "styled"}, // `object` is optional
        {"property": "observer", "object": "Mobx"},
        {"property": "observer", "object": "<pragma>"} // sets `object` to whatever value `settings.react.pragma` is set to
    ],
    "formComponents": [
      // Components used as alternatives to <form> for forms, eg. <Form endpoint={ url } />
      "CustomForm",
      {"name": "SimpleForm", "formAttribute": "endpoint"},
      {"name": "Form", "formAttribute": ["registerEndpoint", "loginEndpoint"]}, // allows specifying multiple properties if necessary
    ],
    "linkComponents": [
      // Components used as alternatives to <a> for linking, eg. <Link to={ url } />
      "Hyperlink",
      {"name": "MyLink", "linkAttribute": "to"},
      {"name": "Link", "linkAttribute": ["to", "href"]}, // allows specifying multiple properties if necessary
    ]
  }
}

If you do not use a preset you will need to specify individual rules and add extra configuration.

Add "react" to the plugins section.

{
  "plugins": [
    "react"
  ]
}

Enable JSX support.

With eslint 2+

{
  "parserOptions": {
    "ecmaFeatures": {
      "jsx": true
    }
  }
}

Enable the rules that you would like to use.

  "rules": {
    "react/jsx-uses-react": "error",
    "react/jsx-uses-vars": "error",
  }

Shareable configs

This plugin exports a recommended configuration that enforces React good practices.

To enable this configuration use the extends property in your .eslintrc config file:

{
  "extends": ["eslint:recommended", "plugin:react/recommended"]
}

See eslint documentation for more information about extending configuration files.

All

This plugin also exports an all configuration that includes every available rule. This pairs well with the eslint:all rule.

{
  "plugins": [
    "react"
  ],
  "extends": ["eslint:all", "plugin:react/all"]
}

Note: These configurations will import eslint-plugin-react and enable JSX in parser options.

Configuration (new: eslint.config.js)

From v8.21.0, eslint announced a new config system. In the new system, .eslintrc* is no longer used. eslint.config.js would be the default config file name. In eslint v8, the legacy system (.eslintrc*) would still be supported, while in eslint v9, only the new system would be supported.

And from v8.23.0, eslint CLI starts to look up eslint.config.js. So, if your eslint is >=8.23.0, you're 100% ready to use the new config system.

You might want to check out the official blog posts,

and the official docs.

Plugin

The default export of eslint-plugin-react is a plugin object.

const react = require('eslint-plugin-react');
const globals = require('globals');

module.exports = [
  …
  {
    files: ['**/*.{js,jsx,mjs,cjs,ts,tsx}'],
    plugins: {
      react,
    },
    languageOptions: {
      parserOptions: {
        ecmaFeatures: {
          jsx: true,
        },
      },
      globals: {
        ...globals.browser,
      },
    },
    rules: {
      // ... any rules you want
      'react/jsx-uses-react': 'error',
      'react/jsx-uses-vars': 'error',
     },
    // ... others are omitted for brevity
  },
  …
];

Configuring shared settings

Refer to the official docs.

The schema of the settings.react object would be identical to that of what's already described above in the legacy config section.

Flat Configs

This plugin exports 3 flat configs:

  • flat.all
  • flat.recommended
  • flat['jsx-runtime']

The flat configs are available via the root plugin import. They will configure the plugin under the react/ namespace and enable JSX in languageOptions.parserOptions.

const reactPlugin = require('eslint-plugin-react');

module.exports = [
  …
  reactPlugin.configs.flat.recommended, // This is not a plugin object, but a shareable config object
  reactPlugin.configs.flat['jsx-runtime'], // Add this if you are using React 17+
  …
];

You can of course add/override some properties.

Note: Our shareable configs does not preconfigure files or languageOptions.globals. For most of the cases, you probably want to configure some properties by yourself.

const reactPlugin = require('eslint-plugin-react');
const globals = require('globals');

module.exports = [
  …
  {
    files: ['**/*.{js,mjs,cjs,jsx,mjsx,ts,tsx,mtsx}'],
    ...reactPlugin.configs.flat.recommended,
    languageOptions: {
      ...reactPlugin.configs.flat.recommended.languageOptions,
      globals: {
        ...globals.serviceworker,
        ...globals.browser,
      },
    },
  },
  …
];

The above example is same as the example below, as the new config system is based on chaining.

const reactPlugin = require('eslint-plugin-react');
const globals = require('globals');

module.exports = [
  …
  {
    files: ['**/*.{js,mjs,cjs,jsx,mjsx,ts,tsx,mtsx}'],
    ...reactPlugin.configs.flat.recommended,
  },
  {
    files: ['**/*.{js,mjs,cjs,jsx,mjsx,ts,tsx,mtsx}'],
    languageOptions: {
      globals: {
        ...globals.serviceworker,
        ...globals.browser,
      },
    },
  },
  …
];

List of supported rules

πŸ’Ό Configurations enabled in.
🚫 Configurations disabled in.
πŸƒ Set in the jsx-runtime configuration.
β˜‘οΈ Set in the recommended configuration.
πŸ”§ Automatically fixable by the --fix CLI option.
πŸ’‘ Manually fixable by editor suggestions.
❌ Deprecated.

NameΒ Β Β Β Β Β Β Β Β Β Β Β Β Β Β Β Β Β Β Β Β Β Β Β Β Β Β Β Β Β Β Β Β DescriptionπŸ’ΌπŸš«πŸ”§πŸ’‘βŒ
boolean-prop-namingEnforces consistent naming for boolean props
button-has-typeDisallow usage of button elements without an explicit type attribute
checked-requires-onchange-or-readonlyEnforce using onChange or readonly attribute when checked is used
default-props-match-prop-typesEnforce all defaultProps have a corresponding non-required PropType
destructuring-assignmentEnforce consistent usage of destructuring assignment of props, state, and contextπŸ”§
display-nameDisallow missing displayName in a React component definitionβ˜‘οΈ
forbid-component-propsDisallow certain props on components
forbid-dom-propsDisallow certain props on DOM Nodes
forbid-elementsDisallow certain elements
forbid-foreign-prop-typesDisallow using another component's propTypes
forbid-prop-typesDisallow certain propTypes
forward-ref-uses-refRequire all forwardRef components include a ref parameterπŸ’‘
function-component-definitionEnforce a specific function type for function componentsπŸ”§
hook-use-stateEnsure destructuring and symmetric naming of useState hook value and setter variablesπŸ’‘
iframe-missing-sandboxEnforce sandbox attribute on iframe elements
jsx-boolean-valueEnforce boolean attributes notation in JSXπŸ”§
jsx-child-element-spacingEnforce or disallow spaces inside of curly braces in JSX attributes and expressions
jsx-closing-bracket-locationEnforce closing bracket location in JSXπŸ”§
jsx-closing-tag-locationEnforce closing tag location for multiline JSXπŸ”§
jsx-curly-brace-presenceDisallow unnecessary JSX expressions when literals alone are sufficient or enforce JSX expressions on literals in JSX children or attributesπŸ”§
jsx-curly-newlineEnforce consistent linebreaks in curly braces in JSX attributes and expressionsπŸ”§
jsx-curly-spacingEnforce or disallow spaces inside of curly braces in JSX attributes and expressionsπŸ”§
jsx-equals-spacingEnforce or disallow spaces around equal signs in JSX attributesπŸ”§
jsx-filename-extensionDisallow file extensions that may contain JSX
jsx-first-prop-new-lineEnforce proper position of the first property in JSXπŸ”§
jsx-fragmentsEnforce shorthand or standard form for React fragmentsπŸ”§
jsx-handler-namesEnforce event handler naming conventions in JSX
jsx-indentEnforce JSX indentationπŸ”§
jsx-indent-propsEnforce props indentation in JSXπŸ”§
jsx-keyDisallow missing key props in iterators/collection literalsβ˜‘οΈ
jsx-max-depthEnforce JSX maximum depth
jsx-max-props-per-lineEnforce maximum of props on a single line in JSXπŸ”§
jsx-newlineRequire or prevent a new line after jsx elements and expressions.πŸ”§
jsx-no-bindDisallow .bind() or arrow functions in JSX props
jsx-no-comment-textnodesDisallow comments from being inserted as text nodesβ˜‘οΈ
jsx-no-constructed-context-valuesDisallows JSX context provider values from taking values that will cause needless rerenders
jsx-no-duplicate-propsDisallow duplicate properties in JSXβ˜‘οΈ
jsx-no-leaked-renderDisallow problematic leaked values from being renderedπŸ”§
jsx-no-literalsDisallow usage of string literals in JSX
jsx-no-script-urlDisallow usage of javascript: URLs
jsx-no-target-blankDisallow target="_blank" attribute without rel="noreferrer"β˜‘οΈπŸ”§
jsx-no-undefDisallow undeclared variables in JSXβ˜‘οΈ
jsx-no-useless-fragmentDisallow unnecessary fragmentsπŸ”§
jsx-one-expression-per-lineRequire one JSX element per lineπŸ”§
jsx-pascal-caseEnforce PascalCase for user-defined JSX components
jsx-props-no-multi-spacesDisallow multiple spaces between inline JSX propsπŸ”§
jsx-props-no-spread-multiDisallow JSX prop spreading the same identifier multiple times
jsx-props-no-spreadingDisallow JSX prop spreading
jsx-sort-default-propsEnforce defaultProps declarations alphabetical sorting❌
jsx-sort-propsEnforce props alphabetical sortingπŸ”§
jsx-space-before-closingEnforce spacing before closing bracket in JSXπŸ”§βŒ
jsx-tag-spacingEnforce whitespace in and around the JSX opening and closing bracketsπŸ”§
jsx-uses-reactDisallow React to be incorrectly marked as unusedβ˜‘οΈπŸƒ
jsx-uses-varsDisallow variables used in JSX to be incorrectly marked as unusedβ˜‘οΈ
jsx-wrap-multilinesDisallow missing parentheses around multiline JSXπŸ”§
no-access-state-in-setstateDisallow when this.state is accessed within setState
no-adjacent-inline-elementsDisallow adjacent inline elements not separated by whitespace.
no-array-index-keyDisallow usage of Array index in keys
no-arrow-function-lifecycleLifecycle methods should be methods on the prototype, not class fieldsπŸ”§
no-children-propDisallow passing of children as propsβ˜‘οΈ
no-dangerDisallow usage of dangerous JSX properties
no-danger-with-childrenDisallow when a DOM element is using both children and dangerouslySetInnerHTMLβ˜‘οΈ
no-deprecatedDisallow usage of deprecated methodsβ˜‘οΈ
no-did-mount-set-stateDisallow usage of setState in componentDidMount
no-did-update-set-stateDisallow usage of setState in componentDidUpdate
no-direct-mutation-stateDisallow direct mutation of this.stateβ˜‘οΈ
no-find-dom-nodeDisallow usage of findDOMNodeβ˜‘οΈ
no-invalid-html-attributeDisallow usage of invalid attributesπŸ’‘
no-is-mountedDisallow usage of isMountedβ˜‘οΈ
no-multi-compDisallow multiple component definition per file
no-namespaceEnforce that namespaces are not used in React elements
no-object-type-as-default-propDisallow usage of referential-type variables as default param in functional component
no-redundant-should-component-updateDisallow usage of shouldComponentUpdate when extending React.PureComponent
no-render-return-valueDisallow usage of the return value of ReactDOM.renderβ˜‘οΈ
no-set-stateDisallow usage of setState
no-string-refsDisallow using string referencesβ˜‘οΈ
no-this-in-sfcDisallow this from being used in stateless functional components
no-typosDisallow common typos
no-unescaped-entitiesDisallow unescaped HTML entities from appearing in markupβ˜‘οΈπŸ’‘
no-unknown-propertyDisallow usage of unknown DOM propertyβ˜‘οΈπŸ”§
no-unsafeDisallow usage of unsafe lifecycle methodsβ˜‘οΈ
no-unstable-nested-componentsDisallow creating unstable components inside components
no-unused-class-component-methodsDisallow declaring unused methods of component class
no-unused-prop-typesDisallow definitions of unused propTypes
no-unused-stateDisallow definitions of unused state
no-will-update-set-stateDisallow usage of setState in componentWillUpdate
prefer-es6-classEnforce ES5 or ES6 class for React Components
prefer-exact-propsPrefer exact proptype definitions
prefer-read-only-propsEnforce that props are read-onlyπŸ”§
prefer-stateless-functionEnforce stateless components to be written as a pure function
prop-typesDisallow missing props validation in a React component definitionβ˜‘οΈ
react-in-jsx-scopeDisallow missing React when using JSXβ˜‘οΈπŸƒ
require-default-propsEnforce a defaultProps definition for every prop that is not a required prop
require-optimizationEnforce React components to have a shouldComponentUpdate method
require-render-returnEnforce ES5 or ES6 class for returning value in render functionβ˜‘οΈ
self-closing-compDisallow extra closing tags for components without childrenπŸ”§
sort-compEnforce component methods order
sort-default-propsEnforce defaultProps declarations alphabetical sorting
sort-prop-typesEnforce propTypes declarations alphabetical sortingπŸ”§
state-in-constructorEnforce class component state initialization style
static-property-placementEnforces where React component static properties should be positioned.
style-prop-objectEnforce style prop value is an object
void-dom-elements-no-childrenDisallow void DOM elements (e.g. <img />, <br />) from receiving children

Other useful plugins

License

eslint-plugin-react is licensed under the MIT License.

Keywords

eslint

FAQs

Package last updated on 03 Apr 2025

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts