Installations
npm install eslint-plugin-jsoncDeveloper Guide
Typescript
Yes
Module System
CommonJS
Min. Node Version
^12.22.0 || ^14.17.0 || >=16.0.0
Node Version
18.20.5
NPM Version
10.8.2
Releases
Contributors
Unable to fetch Contributors
Languages
TypeScript (98.18%)
JavaScript (1.28%)
HTML (0.55%)
Developer
Download Statistics
Total Downloads
34,168,876
Last Day
39,168
Last Week
238,307
Last Month
1,771,346
Last Year
18,871,101
GitHub Statistics
205 Stars
376 Commits
17 Forks
5 Watching
6 Branches
13 Contributors
Bundle Size
449.76 kB
Minified
111.49 kB
Minified + Gzipped
Sponsor this package
Maintainers
Package Meta Information
Latest Version
2.18.2
Package Id
eslint-plugin-jsonc@2.18.2
Unpacked Size
304.65 kB
Size
47.05 kB
File Count
77
NPM Version
10.8.2
Node Version
18.20.5
Publised On
18 Nov 2024
Total Downloads
Cumulative downloads
Total Downloads
34,168,876
Last day
-2.6%
39,168
Compared to previous day
Last week
-36.7%
238,307
Compared to previous week
Last month
-10.8%
1,771,346
Compared to previous month
Last year
61.4%
18,871,101
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
8
Peer Dependencies
1
Dev Dependencies
50
Introduction
eslint-plugin-jsonc is ESLint plugin for JSON, JSONC and JSON5 files.
:name_badge: Features
This ESLint plugin provides linting rules relate to better ways to help you avoid problems when using JSON, JSONC and JSON5.
- You can use ESLint to lint JSON.
- You can apply rules similar to the rules you use for JavaScript to JSON using the
"jsonc/auto"rule provided by this plugin. - You can choose the appropriate config provided by this plugin depending on whether you are using JSON, JSONC or JSON5.
- Supports Vue SFC custom blocks such as
<i18n>.
Requirementsvue-eslint-parserv7.3.0 and above. - Supports ESLint directives. e.g.
// eslint-disable-next-line - You can check your code in real-time using the ESLint editor integrations.
You can check on the Online DEMO.
:question: Why is it ESLint plugin?
ESLint is a great linter for JavaScript.
Since JSON is a subset of JavaScript, the same parser and rules can be applied to JSON.
Also, JSONC and JSON5, which are variants of JSON, are more similar to JavaScript than JSON. Applying a JavaScript linter to JSON is more rational than creating a JSON-specific linter.
How does eslint-plugin-jsonc work?
This plugin parses .json with its own parser, but this parser just converts AST parsed by acorn (It is used internally by the ESLint standard parser) into AST with another name. However, ASTs that do not exist in JSON and the superset of JSON syntaxes are reported as parsing errors. By converting the AST to another name, we prevent false positives from ESLint core rules.
Moreover, You can do the same linting using the extended rules of the ESLint core rules provided by this plugin.
The parser package used by this plugin is jsonc-eslint-parser.
:question: How is it different from other JSON plugins?
Plugins that do not use AST
e.g. eslint-plugin-json
These plugins use the processor to parse and return the results independently, without providing the ESLint engine with AST and source code text.
Plugins don't provide AST, so you can't use directive comments (e.g. /* eslint-disable */).
Plugins don't provide source code text, so you can't use it with plugins and rules that use text (e.g. eslint-plugin-prettier, eol-last).
Also, most plugins don't support JSON5.
eslint-plugin-jsonc works by providing AST and source code text to ESLint.
Plugins that use the same AST as JavaScript
e.g. eslint-plugin-json-files, eslint-plugin-json-es
These plugins use the same AST as JavaScript for linting.
Since the plugin uses the same AST as JavaScript, it may not report syntax that is not available in JSON (e.g. 1 + 1, (42)). Also, ESLint core rules and other plugin rules can false positives (e.g. quote-props rule reports quote on keys), which can complicate the your configuration.
The AST used by eslint-plugin-jsonc is similar to JavaScript AST, but with a different node name. This will prevent false positives. This means that it can be easily used in combination with other plugins.
:book: Documentation
See documents.
:cd: Installation
1npm install --save-dev eslint eslint-plugin-jsonc
Requirements
- ESLint v6.0.0 and above
- Node.js v12.22.x, v14.17.x, v16.x and above
:book: Usage
Configuration
New Config (eslint.config.js)
Use eslint.config.js file to configure rules. See also: https://eslint.org/docs/latest/use/configure/configuration-files-new.
Example eslint.config.js:
1import eslintPluginJsonc from 'eslint-plugin-jsonc'; 2export default [ 3 // add more generic rule sets here, such as: 4 // js.configs.recommended, 5 ...eslintPluginJsonc.configs['flat/recommended-with-jsonc'], 6 { 7 rules: { 8 // override/add rules settings here, such as: 9 // 'jsonc/rule-name': 'error' 10 } 11 } 12];
This plugin provides configs:
*.configs['flat/base']... Configuration to enable correct JSON parsing.*.configs['flat/recommended-with-json']... Recommended configuration for JSON.*.configs['flat/recommended-with-jsonc']... Recommended configuration for JSONC.*.configs['flat/recommended-with-json5']... Recommended configuration for JSON5.*.configs['flat/prettier']... Turn off rules that may conflict with Prettier.*.configs['flat/all']... Enables all rules. It's meant for testing, not for production use because it changes with every minor and major version of the plugin. Use it at your own risk.
This plugin will parse .json, .jsonc and .json5 by default using the configuration provided by the plugin (unless you already have a parser configured - see below).
See the rule list to get the rules that this plugin provides.
Legacy Config (.eslintrc)
Use .eslintrc.* file to configure rules. See also: https://eslint.org/docs/latest/use/configure/.
Example .eslintrc.js:
1module.exports = { 2 extends: [ 3 // add more generic rulesets here, such as: 4 // 'eslint:recommended', 5 "plugin:jsonc/recommended-with-jsonc", 6 ], 7 rules: { 8 // override/add rules settings here, such as: 9 // 'jsonc/rule-name': 'error' 10 }, 11};
This plugin provides configs:
plugin:jsonc/base... Configuration to enable correct JSON parsing.plugin:jsonc/recommended-with-json... Recommended configuration for JSON.plugin:jsonc/recommended-with-jsonc... Recommended configuration for JSONC.plugin:jsonc/recommended-with-json5... Recommended configuration for JSON5.plugin:jsonc/prettier... Turn off rules that may conflict with Prettier.plugin:jsonc/all... Enables all rules. It's meant for testing, not for production use because it changes with every minor and major version of the plugin. Use it at your own risk.
This plugin will parse .json, .jsonc and .json5 by default using the configuration provided by the plugin (unless you already have a parser configured - see below).
See the rule list to get the rules that this plugin provides.
Parser Configuration
If you have already specified a parser in your .eslintrc, you will also need to manually configure the parser for JSON files (your parser config takes priority over that defined by extends shared configs).
For example, if you are using the "@babel/eslint-parser", configure it as follows:
1module.exports = { 2 // ... 3 extends: ["plugin:jsonc/recommended-with-jsonc"], 4 // ... 5 parser: "@babel/eslint-parser", 6 // Add an `overrides` section to add a parser configuration for json. 7 overrides: [ 8 { 9 files: ["*.json", "*.json5", "*.jsonc"], 10 parser: "jsonc-eslint-parser", 11 }, 12 ], 13 // ... 14};
Experimental support for @eslint/json
We've launched experimental support for @eslint/json.
Configure it as follows:
1import json from "@eslint/json"; 2import jsonc from 'eslint-plugin-jsonc'; 3 4export default [ 5 { 6 plugins: { 7 json, 8 jsonc 9 }, 10 }, 11 { 12 files: ["**/*.json"], 13 language: "json/json", 14 rules: { 15 // 'json/rule-name': 'error', 16 // 'jsonc/rule-name': 'error' 17 }, 18 }, 19 { 20 files: ["**/*.jsonc", ".vscode/*.json"], 21 language: "json/jsonc", 22 rules: { 23 // 'json/rule-name': 'error', 24 // 'jsonc/rule-name': 'error' 25 }, 26 }, 27 { 28 files: ["**/*.json5"], 29 language: "json/json5", 30 rules: { 31 // 'json/rule-name': 'error', 32 // 'jsonc/rule-name': 'error' 33 }, 34 }, 35];
However, we're not yet sure how best to make this work. Please note that we may change behavior without notice.
:computer: Editor Integrations
Visual Studio Code
Use the dbaeumer.vscode-eslint extension that Microsoft provides officially.
You have to configure the eslint.validate option of the extension to check .json files, because the extension targets only *.js or *.jsx files by default.
Example .vscode/settings.json:
1{ 2 "eslint.validate": ["javascript", "javascriptreact", "json", "jsonc", "json5"] 3}
:white_check_mark: Rules
The --fix option on the command line automatically fixes problems reported by rules which have a wrench :wrench: below.
The rules with the following star :star: are included in the config.
JSONC Rules
| Rule ID | Description | Fixable | JSON | JSONC | JSON5 |
|---|---|---|---|---|---|
| jsonc/auto | apply jsonc rules similar to your configured ESLint core rules | :wrench: | |||
| jsonc/key-name-casing | enforce naming convention to property key names | ||||
| jsonc/no-bigint-literals | disallow BigInt literals | :star: | :star: | :star: | |
| jsonc/no-binary-expression | disallow binary expression | :wrench: | :star: | :star: | :star: |
| jsonc/no-binary-numeric-literals | disallow binary numeric literals | :wrench: | :star: | :star: | :star: |
| jsonc/no-comments | disallow comments | :star: | |||
| jsonc/no-escape-sequence-in-identifier | disallow escape sequences in identifiers. | :wrench: | :star: | :star: | :star: |
| jsonc/no-hexadecimal-numeric-literals | disallow hexadecimal numeric literals | :wrench: | :star: | :star: | |
| jsonc/no-infinity | disallow Infinity | :star: | :star: | ||
| jsonc/no-nan | disallow NaN | :star: | :star: | ||
| jsonc/no-number-props | disallow number property keys | :wrench: | :star: | :star: | :star: |
| jsonc/no-numeric-separators | disallow numeric separators | :wrench: | :star: | :star: | :star: |
| jsonc/no-octal-numeric-literals | disallow octal numeric literals | :wrench: | :star: | :star: | :star: |
| jsonc/no-parenthesized | disallow parentheses around the expression | :wrench: | :star: | :star: | :star: |
| jsonc/no-plus-sign | disallow plus sign | :wrench: | :star: | :star: | |
| jsonc/no-regexp-literals | disallow RegExp literals | :star: | :star: | :star: | |
| jsonc/no-template-literals | disallow template literals | :wrench: | :star: | :star: | :star: |
| jsonc/no-undefined-value | disallow undefined | :star: | :star: | :star: | |
| jsonc/no-unicode-codepoint-escapes | disallow Unicode code point escape sequences. | :wrench: | :star: | :star: | :star: |
| jsonc/sort-array-values | require array values to be sorted | :wrench: | |||
| jsonc/sort-keys | require object keys to be sorted | :wrench: | |||
| jsonc/valid-json-number | disallow invalid number for JSON | :wrench: | :star: | :star: | |
| jsonc/vue-custom-block/no-parsing-error | disallow parsing errors in Vue custom blocks | :star: | :star: | :star: |
Extension Rules
| Rule ID | Description | Fixable | JSON | JSONC | JSON5 |
|---|---|---|---|---|---|
| jsonc/array-bracket-newline | enforce line breaks after opening and before closing array brackets | :wrench: | |||
| jsonc/array-bracket-spacing | disallow or enforce spaces inside of brackets | :wrench: | |||
| jsonc/array-element-newline | enforce line breaks between array elements | :wrench: | |||
| jsonc/comma-dangle | require or disallow trailing commas | :wrench: | :star: | ||
| jsonc/comma-style | enforce consistent comma style | :wrench: | |||
| jsonc/indent | enforce consistent indentation | :wrench: | |||
| jsonc/key-spacing | enforce consistent spacing between keys and values in object literal properties | :wrench: | |||
| jsonc/no-dupe-keys | disallow duplicate keys in object literals | :star: | :star: | :star: | |
| jsonc/no-floating-decimal | disallow leading or trailing decimal points in numeric literals | :wrench: | :star: | :star: | |
| jsonc/no-irregular-whitespace | disallow irregular whitespace | ||||
| jsonc/no-multi-str | disallow multiline strings | :star: | :star: | ||
| jsonc/no-octal-escape | disallow octal escape sequences in string literals | ||||
| jsonc/no-octal | disallow legacy octal literals | :star: | :star: | :star: | |
| jsonc/no-sparse-arrays | disallow sparse arrays | :star: | :star: | :star: | |
| jsonc/no-useless-escape | disallow unnecessary escape usage | :star: | :star: | :star: | |
| jsonc/object-curly-newline | enforce consistent line breaks inside braces | :wrench: | |||
| jsonc/object-curly-spacing | enforce consistent spacing inside braces | :wrench: | |||
| jsonc/object-property-newline | enforce placing object properties on separate lines | :wrench: | |||
| jsonc/quote-props | require quotes around object literal property names | :wrench: | :star: | :star: | |
| jsonc/quotes | enforce use of double or single quotes | :wrench: | :star: | :star: | |
| jsonc/space-unary-ops | disallow spaces after unary operators | :wrench: | :star: | :star: | :star: |
:rocket: To Do More Verification
Verify using JSON Schema
You can verify using JSON Schema by checking and installing eslint-plugin-json-schema-validator.
Verify the Vue I18n message resource files
You can verify the message files by checking and installing @intlify/eslint-plugin-vue-i18n.
:traffic_light: Semantic Versioning Policy
eslint-plugin-jsonc follows Semantic Versioning and ESLint's Semantic Versioning Policy.
:beers: Contributing
Welcome contributing!
Please use GitHub's Issues/PRs.
Development Tools
npm testruns tests and measures coverage.npm run updateruns in order to update readme and recommended configuration.
:couple: Related Packages
- eslint-plugin-yml ... ESLint plugin for YAML.
- eslint-plugin-toml ... ESLint plugin for TOML.
- eslint-plugin-json-schema-validator ... ESLint plugin that validates data using JSON Schema Validator.
- jsonc-eslint-parser ... JSON, JSONC and JSON5 parser for use with ESLint plugins.
- yaml-eslint-parser ... YAML parser for use with ESLint plugins.
- toml-eslint-parser ... TOML parser for use with ESLint plugins.
:lock: License
See the LICENSE file for license rights and limitations (MIT).
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
20 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
0 existing vulnerabilities detected
Reason
Found 1/24 approved changesets -- score normalized to 0
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Info: topLevel 'contents' permission set to 'read': .github/workflows/GHPages.yml:10
- Warn: no topLevel permission defined: .github/workflows/NodeCI.yml:1
- Warn: no topLevel permission defined: .github/workflows/Release.yml:1
- Warn: no topLevel permission defined: .github/workflows/format.yml:1
- Info: no jobLevel write permissions found
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/GHPages.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/GHPages.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/GHPages.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/GHPages.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/GHPages.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/GHPages.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/GHPages.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/GHPages.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/GHPages.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/GHPages.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/NodeCI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/NodeCI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/NodeCI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/NodeCI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/NodeCI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/NodeCI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/NodeCI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/NodeCI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/NodeCI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/NodeCI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/NodeCI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/NodeCI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/NodeCI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/NodeCI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/NodeCI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/NodeCI.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/NodeCI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/NodeCI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/NodeCI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/Release.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/Release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/Release.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/Release.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/Release.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/Release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/format.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/format.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/format.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/format.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-jsonc/stale.yml/master?enable=pin
- Warn: npmCommand not pinned by hash: .github/workflows/GHPages.yml:31
- Warn: npmCommand not pinned by hash: .github/workflows/NodeCI.yml:39
- Warn: npmCommand not pinned by hash: .github/workflows/NodeCI.yml:117
- Warn: npmCommand not pinned by hash: .github/workflows/NodeCI.yml:119
- Warn: npmCommand not pinned by hash: .github/workflows/NodeCI.yml:129
- Warn: npmCommand not pinned by hash: .github/workflows/NodeCI.yml:49
- Warn: npmCommand not pinned by hash: .github/workflows/NodeCI.yml:64
- Warn: npmCommand not pinned by hash: .github/workflows/NodeCI.yml:79
- Warn: npmCommand not pinned by hash: .github/workflows/NodeCI.yml:81
- Warn: npmCommand not pinned by hash: .github/workflows/NodeCI.yml:84
- Warn: npmCommand not pinned by hash: .github/workflows/NodeCI.yml:99
- Warn: npmCommand not pinned by hash: .github/workflows/NodeCI.yml:101
- Warn: npmCommand not pinned by hash: .github/workflows/NodeCI.yml:17
- Warn: npmCommand not pinned by hash: .github/workflows/Release.yml:22
- Warn: npmCommand not pinned by hash: .github/workflows/format.yml:17
- Info: 0 out of 28 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 2 third-party GitHubAction dependencies pinned
- Info: 0 out of 15 npmCommand dependencies pinned
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'master'
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 26 are checked with a SAST tool
Score
4.4
/10
Last Scanned on 2025-01-06
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn MoreOther packages similar to eslint-plugin-jsonc
@anolilab/eslint-config
ESLint shareable config for the Anolilab JavaScript style guide.
linted
ESLint mono-plugin bundler with strict, opinionated defaults for (Stylistic) JavaScript, TypeScript, Svelte, HTML, Tailwind/CSS, JSON, JSONC, YAML, and Mocha.
@kalimahapps/eslint-config
Comprehensive and configurable ESLint config for Vue 3 projects with TypeScript support
@elsikora/eslint-config
ESLint configuration vision of ElsiKora