
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
Catch rendered layout bugs automatically - no screenshots needed. Like ESLint for your rendered UI.
Catch rendered layout bugs automatically — no screenshots needed.
Like ESLint, but for your rendered UI. Renderlint detects horizontal overflow, covered buttons, tiny touch targets, and other structural bugs that slip through code review.
rlint check http://localhost:3000
❌ OVERFLOW Horizontal overflow detected (page scrolls 740px beyond viewport)
└─ Element: div.hero-banner
└─ Fix: Add overflow-x: hidden or check for elements with fixed widths
❌ CLICKABILITY Interactive element is covered by another element
└─ Element: button.submit-btn
└─ Covered by: div.modal-backdrop
└─ Fix: Check z-index or remove covering element
⚠️ TOUCH-TARGETS Touch target too small: 32x28px (min: 44x44px)
└─ Element: a.nav-link
└─ Fix: Add min-width: 44px and min-height: 44px
──────────────────────────────────────────────────
Results: 2 errors, 1 warning, 47 passed
──────────────────────────────────────────────────
Layout bugs are invisible in code review. Your PR looks fine, tests pass, but then:
These aren't styling issues — they're structural bugs that can be detected programmatically using getBoundingClientRect(), getComputedStyle(), and elementFromPoint().
# Install globally (recommended — makes `rlint` available everywhere)
npm install -g rlint
# Or use without installing
npx rlint check https://example.com
# Or install as a dev dependency
npm install --save-dev rlint
No extra setup. Renderlint uses your system Chrome — no 150MB Chromium download. If Chrome isn't installed, Chromium is downloaded automatically on first run.
Note: The first run may be slower if Chromium needs to be downloaded (~150MB). Subsequent runs use the cached browser.
# Check any URL
rlint check https://example.com
# Check your dev server
rlint check http://localhost:3000
# Mobile testing (portrait + landscape at 375x667)
rlint check --mobile http://localhost:3000
# Check multiple viewports (mobile + desktop)
rlint check --viewport 375x667,1920x1080 http://localhost:3000
# Auto-detect framework and start dev server
rlint dev
| Check | Severity | What it catches |
|---|---|---|
overflow | error | Horizontal scrollbars from content wider than viewport |
clickability | error | Buttons/links covered by other elements — checks center + all 4 corners |
touch-targets | warning | Elements smaller than 44×44px (WCAG 2.5.5) + adjacent targets with <8px gap |
visibility | warning | Interactive elements that are invisible or off-screen |
text-overflow | warning | Text clipped without proper ellipsis handling |
viewport-meta | warning | Missing or misconfigured viewport meta tag (mobile rendering) |
Renderlint auto-detects your framework and handles hydration:
# Auto-detect and start dev server
rlint dev --routes /,/about,/contact
# Specify framework manually
rlint dev --framework nextjs --routes /,/api/health
Supported: Next.js, SvelteKit, Vite, Remix, Astro, Nuxt, Create React App
import { checkPage } from 'rlint';
import { launchBrowser } from 'rlint/browser';
const browser = await launchBrowser();
const page = await browser.newPage();
await page.goto('http://localhost:3000');
const results = await checkPage(page);
console.log(results.summary);
// { passed: 47, errors: 1, warnings: 2 }
await browser.close();
Renderlint includes an MCP server so AI agents can check pages for layout bugs programmatically.
claude mcp add rlint -- npx rlint-mcp
Or add to your project's .mcp.json:
{
"mcpServers": {
"rlint": {
"command": "npx",
"args": ["rlint-mcp"]
}
}
}
Add to your Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json on macOS, %APPDATA%\Claude\claude_desktop_config.json on Windows):
{
"mcpServers": {
"rlint": {
"command": "npx",
"args": ["rlint-mcp"]
}
}
}
Add to .cursor/mcp.json in your project:
{
"mcpServers": {
"rlint": {
"command": "npx",
"args": ["rlint-mcp"]
}
}
}
| Tool | Description |
|---|---|
check_page | Check a URL for layout issues (overflow, covered buttons, touch targets, etc.) |
check_html | Check raw HTML content directly |
check_file | Check a local HTML file by path |
screenshot | Take a screenshot of a URL or element (returns base64 PNG) |
All check tools accept optional parameters:
viewport ({ width, height }) — custom viewport sizechecks (array) — specific checks to run: overflow, clickability, touch-targets, text-overflow, visibility, viewport-metamobile (boolean) — test at mobile viewports (375x667 portrait + 667x375 landscape)Results include element selectors, dimensions, and fix hints.
If you're an LLM/AI agent with shell access, you can use rlint directly from the command line to validate UI you've built or modified.
# Install globally (one-time setup)
npm install -g rlint
# Check a running dev server
rlint check http://localhost:3000 --format json
# Mobile testing (portrait + landscape, recommended after UI changes)
rlint check --mobile --format json http://localhost:3000
# Check specific routes at mobile viewport
rlint check --viewport 375x667 http://localhost:3000 http://localhost:3000/about
# Check with JSON output (easiest to parse)
rlint check --format json http://localhost:3000
# Run only specific checks
rlint check --only overflow,clickability http://localhost:3000
# Auto-detect framework, start dev server, check routes
rlint dev --routes /,/about,/settings --format json
rlint exits with code 1 if errors are found (code 0 if clean). Use --format json for structured output:
{
"url": "http://localhost:3000",
"summary": { "passed": 47, "errors": 1, "warnings": 2 },
"issues": [
{
"check": "overflow",
"severity": "error",
"message": "Horizontal overflow detected",
"element": { "selector": "div.hero-banner" },
"fixHint": "Add overflow-x: hidden or check for elements with fixed widths"
}
]
}
rlint check --format json http://localhost:3000 on affected routesfixHint and element.selector fields// rlint.config.js
export default {
checks: {
overflow: { horizontal: true },
touchTargets: { minWidth: 44, minHeight: 44 },
clickability: { checkCorners: true },
textOverflow: { allowEllipsis: true },
},
ignore: ['.tooltip', '[data-rlint-ignore]'],
};
<!-- Skip specific elements -->
<input type="checkbox" data-rlint-ignore>
# .github/workflows/rlint.yml
name: Renderlint Check
on: [push, pull_request]
jobs:
check:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
- run: npm ci
- run: npm run build
- run: npm install -g rlint
- run: npm start & npx wait-on http://localhost:3000
- run: rlint check --fail-on warning http://localhost:3000
Tip: Renderlint uses system Chrome. If unavailable, Chromium is downloaded to
~/.cache/rlinton first run. Cache this directory in CI for faster builds.
rlint check <urls...>
-v, --viewport <size> Viewport size (e.g., 375x667,1920x1080)
-f, --format <format> Output: text, json, junit
-o, --only <checks> Run specific checks only
-i, --ignore <selectors> Ignore matching elements
-c, --config <path> Config file path
--fail-on <severity> Exit code 1 on: error, warning
--mobile Test mobile viewports (375x667 + 667x375)
--headed Show browser window
--wait-for-hydration Wait for SPA hydration
rlint dev
-r, --routes <routes> Routes to check (default: /)
-p, --port <port> Dev server port
--framework <name> Framework override
--mobile Test mobile viewports (375x667 + 667x375)
--no-start-server Use existing dev server
Renderlint doesn't compare screenshots. Instead, it queries the DOM:
// Overflow detection
document.documentElement.scrollWidth > document.documentElement.clientWidth
// Covered element detection
document.elementFromPoint(x, y) !== expectedElement
// Touch target detection
element.getBoundingClientRect().width < 44
These checks are deterministic, fast, and don't require human review.
Visual regression (screenshot comparison) catches everything but requires human review for every change. Renderlint catches structural bugs that are objectively wrong:
| Visual Regression | Renderlint |
|---|---|
| Catches color changes | Catches layout bugs |
| Requires baseline images | No baselines needed |
| Needs human review | Fully automated |
| Slow (image comparison) | Fast (DOM queries) |
Use both! Visual regression for design fidelity, Renderlint for structural correctness.
MIT
FAQs
Catch rendered layout bugs automatically - no screenshots needed. Like ESLint for your rendered UI.
The npm package rlint receives a total of 3 weekly downloads. As such, rlint popularity was classified as not popular.
We found that rlint demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.