npmpackage.info

Gathering detailed insights and metrics for @uselessscope/eslint-import-resolver-webpack

@uselessscope/eslint-import-resolver-webpack - 0.14.9 | npmpackage.info

@uselessscope/eslint-import-resolver-webpack

ESLint plugin with rules that help validate proper imports.

0.14.9

5,773

MIT

JavaScript

18.63 kB

6.1

Installations

npm install @uselessscope/eslint-import-resolver-webpack

Developer Guide

BETA

Typescript

No

Module System

CommonJS

Min. Node Version

>= 6

Node Version

18.0.0

NPM Version

8.6.0 Pull Requests

Open

87

Total

1,104

Closed

306

Merged

711

Issues

Open

489

Total

2,052

Closed

1,563

Releases

v2.32.0

Updated on Jun 20, 2025

v2.31.0

Updated on Oct 03, 2024

v2.30.0

Updated on Sep 03, 2024

v2.29.1

Updated on Dec 14, 2023

v2.29.0

Updated on Oct 23, 2023

v2.28.1

Updated on Oct 23, 2023

View All 57 releases

Languages

JavaScript

HTML

TypeScript

Shell

PowerShell

Batchfile

CoffeeScript

JavaScript (99.12%)

HTML (0.46%)

TypeScript (0.2%)

Shell (0.17%)

PowerShell (0.03%)

Batchfile (0.02%)

Developer

import-js

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

MIT License

5,773 Stars

2,322 Commits

1,550 Forks

37 Watchers

16 Branches

364 Contributors

Updated on Jul 10, 2025

Maintainers

View All 364 Contributors

Package Meta Information

Latest Version

0.14.9

Package Id

@uselessscope/eslint-import-resolver-webpack@0.14.9

Unpacked Size

18.63 kB

Size

5.75 kB

File Count

NPM Version

8.6.0

Node Version

18.0.0

Published on

Mar 11, 2024

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

eslint-import-resolver-webpack

Webpack-literate module resolution plugin for eslint-plugin-import.

:boom: Only "synchronous" Webpack configs are supported at the moment. If your config returns a Promise, this will cause problems. Consider splitting your asynchronous configuration to a separate config.

Published separately to allow pegging to a specific version in case of breaking changes.

To use with eslint-plugin-import, run:

1npm i eslint-import-resolver-webpack -g

or if you manage ESLint as a dev dependency:

1# inside your project's working tree
2npm install eslint-import-resolver-webpack --save-dev

Will look for webpack.config.js as a sibling of the first ancestral package.json, or a config parameter may be provided with another filename/path either relative to the package.json, or a complete, absolute path.

If multiple webpack configurations are found the first configuration containing a resolve section will be used. Optionally, the config-index (zero-based) setting can be used to select a specific configuration.

1---
2settings:
3  import/resolver: webpack  # take all defaults

or with explicit config file name:

1---
2settings:
3  import/resolver:
4    webpack:
5      config: 'webpack.dev.config.js'

or with explicit config file index:

1---
2settings:
3  import/resolver:
4    webpack:
5      config: 'webpack.multiple.config.js'
6      config-index: 1   # take the config at index 1

or with explicit config file path relative to your projects's working directory:

1---
2settings:
3  import/resolver:
4    webpack:
5      config: './configs/webpack.dev.config.js'

or with explicit config object:

1---
2settings:
3  import/resolver:
4    webpack:
5      config:
6        resolve:
7          extensions:
8            - .js
9            - .jsx

If your config relies on environment variables, they can be specified using the env parameter. If your config is a function, it will be invoked with the value assigned to env:

1---
2settings:
3  import/resolver:
4    webpack:
5      config: 'webpack.config.js'
6      env:
7        NODE_ENV: 'local'
8        production: true

Support

Get supported eslint-import-resolver-webpack with the Tidelift Subscription

No vulnerabilities found.

10

Maintained

Determines if the project is "actively maintained".

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Security-Policy

Determines if the project has published a security policy.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

6

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: third-party GitHubAction not pinned by hash: .github/workflows/eslint-8+.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/eslint-8+.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/eslint-8+.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/eslint-8+.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/eslint-8+.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/eslint-8+.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/eslint-8+.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/eslint-8+.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/eslint-old.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/eslint-old.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/eslint-old.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/eslint-old.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/eslint-old.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/eslint-old.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/eslint-old.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/eslint-old.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-wsl.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/native-wsl.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-wsl.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/native-wsl.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-wsl.yml:149: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/native-wsl.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/node-pretest.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/node-pretest.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/node-pretest.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/node-pretest.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/node-pretest.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/node-pretest.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/node-pretest.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/node-pretest.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/packages.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/packages.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/packages.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/packages.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/packages.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/packages.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/packages.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/packages.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/require-allow-edits.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/require-allow-edits.yml/main?enable=pin
Warn: npmCommand not pinned by hash: tests/dep-time-travel.sh:14
Warn: npmCommand not pinned by hash: tests/dep-time-travel.sh:18
Warn: npmCommand not pinned by hash: tests/dep-time-travel.sh:23
Warn: npmCommand not pinned by hash: tests/dep-time-travel.sh:25
Warn: npmCommand not pinned by hash: tests/dep-time-travel.sh:31
Warn: npmCommand not pinned by hash: tests/dep-time-travel.sh:34
Warn: npmCommand not pinned by hash: tests/dep-time-travel.sh:37
Warn: npmCommand not pinned by hash: tests/dep-time-travel.sh:43
Warn: npmCommand not pinned by hash: tests/dep-time-travel.sh:49
Warn: npmCommand not pinned by hash: .github/workflows/node-pretest.yml:32
Info: 0 out of 6 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 14 third-party GitHubAction dependencies pinned
Info: 0 out of 10 npmCommand dependencies pinned

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

Score

6.1

/10

Last Scanned on 2025-06-30

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

@uselessscope/eslint-import-resolver-webpack

Installations

Developer Guide

No

CommonJS

>= 6

18.0.0

8.6.0

Pull Requests

87

1,104

306

711

Issues

489

2,052

1,563

Releases

Languages

Developer

import-js

Download Statistics

GitHub Statistics

Maintainers

Package Meta Information

Total Downloads

NaN

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

Peer Dependencies

Dev Dependencies

eslint-import-resolver-webpack

Support

10

10

10

10

10

10

6

0

0

0

0

0

6.1

/10