
Security News
Meet Socket at Black Hat Europe and BSides London 2025
Socket is heading to London! Stop by our booth or schedule a meeting to see what we've been working on.
stylelint-config-gds
Advanced tools
This provides a Stylelint configuration for linting SCSS and CSS files as per the conventions of the Government Digital Service (GDS).
It builds upon stylelint-config-standard with conventions GDS have adopted over the years.
This project was developed with a number of goals in mind, these should be considered whenever proposals are made to add to or amend the rules.
These rules are expected to be mostly used for SCSS projects (as these are more common at GDS) however the CSS rules can be used alone.
To add this to your project, install Stylelint and this module:
npm install --save-dev stylelint stylelint-config-gds
You then need to configure Stylelint.
To lint SCSS you can add the following property to your package.json:
"stylelint": {
"extends": "stylelint-config-gds/scss"
}
To lint CSS add the following:
"stylelint": {
"extends": "stylelint-config-gds/css"
}
You should then be able to run a lint with
node_modules/.bin/stylelint '**/*.(s)?css'.
Make changes to rules that affect both CSS and SCSS in ./css-rules.js, for
rules that only apply to SCSS add them to ./scss-rules.js.
You can lint the JS and run tests with npm test
GitHub Actions is used to release new versions of this module when a PR is merged into the main branch and there is a new version number.
To create a new release you should amend package.json to have the new
version number (based on semvar) and run npm install
to update package-lock.json. You should then update the
CHANGELOG.md. Finally, open a PR - once this is merged
the change will be released.
FAQs
A Stylelint configuration for the UK Government Digital Service.
The npm package stylelint-config-gds receives a total of 9,079 weekly downloads. As such, stylelint-config-gds popularity was classified as popular.
We found that stylelint-config-gds demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket is heading to London! Stop by our booth or schedule a meeting to see what we've been working on.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.