npmpackage.info

Gathering detailed insights and metrics for eslint-plugin-regexp

Other packages similar to eslint-plugin-regexp

eslint-plugin-no-lookahead-lookbehind-regexp

0.3.0

eslint-plugin-regex

1.10.0

ESLint rules using Regular Expression

eslint-plugin-redos

4.5.0

ESLint plugin for catching ReDoS vulnerability

eslint-config-cityssm

26.0.0

ESLint rules used in the City of Sault Ste. Marie's TypeScript projects.

Gathering detailed insights and metrics for eslint-plugin-regexp

eslint-plugin-regexp - 2.9.0 | npmpackage.info

eslint-plugin-regexp

ESLint plugin for finding regex mistakes and style guide violations.

2.9.0

729

MIT

TypeScript

815.10 kB

4.3

Installations

npm install eslint-plugin-regexp

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS

Min. Node Version

^18 || >=20

Node Version

20.19.1

NPM Version

10.8.2 Pull Requests

Open

4

Total

708

Closed

51

Merged

653

Issues

Open

16

Total

140

Closed

124

Releases

v2.9.0

Updated on Jun 08, 2025

v2.8.0

Updated on Jun 04, 2025

v2.7.0

Updated on Nov 15, 2024

v2.6.0

Updated on May 21, 2024

v2.5.0

Updated on Apr 08, 2024

v2.4.0

Updated on Mar 24, 2024

View All 78 releases

Languages

TypeScript

JavaScript

TypeScript (99.18%)

JavaScript (0.82%)

Developer

ota-meshi

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

MIT License

729 Stars

731 Commits

15 Forks

6 Watchers

6 Branches

18 Contributors

Updated on Jul 11, 2025

Maintainers

View All 18 Contributors

Package Meta Information

Latest Version

2.9.0

Package Id

eslint-plugin-regexp@2.9.0

Unpacked Size

815.10 kB

Size

141.18 kB

File Count

291

NPM Version

10.8.2

Node Version

20.19.1

Published on

Jun 08, 2025

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Introduction

eslint-plugin-regexp is ESLint plugin for finding RegExp mistakes and RegExp style guide violations.

:name_badge: Features

This ESLint plugin provides linting rules relate to better ways to help you avoid problems when using RegExp.

Find the wrong usage of regular expressions, and their hints.
Enforces a consistent style of regular expressions.
Find hints for writing optimized regular expressions.
80 plugin rules for regular expression syntax and features.

You can check on the Online DEMO.

:book: Documentation

See documents.

:cd: Installation

1npm install --save-dev eslint eslint-plugin-regexp

Requirements

ESLint v8.44.0 and above

Node.js v18.x, v20.x and above

:book: Usage

Add regexp to the plugins section of your eslint.config.js or .eslintrc configuration file (you can omit the eslint-plugin- prefix) and either use one of the two configurations available (recommended or all) or configure the rules you want:

The recommended configuration (New Config)

The plugin.configs["flat/recommended"] config enables a subset of the rules that should be most useful to most users. See lib/configs/rules/recommended.ts for more details.

1// eslint.config.js
2import * as regexpPlugin from "eslint-plugin-regexp"
3
4export default [
5    regexpPlugin.configs["flat/recommended"],
6];

The recommended configuration (Legacy Config)

The plugin:regexp/recommended config enables a subset of the rules that should be most useful to most users. See lib/configs/rules/recommended.ts for more details.

1// .eslintrc.js
2module.exports = {
3    "plugins": [
4        "regexp"
5    ],
6    "extends": [
7         // add more generic rulesets here, such as:
8         // 'eslint:recommended',
9        "plugin:regexp/recommended"
10    ]
11}

Advanced Configuration

Override/add specific rules configurations. See also: http://eslint.org/docs/user-guide/configuring.

1// eslint.config.js
2import * as regexpPlugin from "eslint-plugin-regexp"
3
4export default [
5    {
6        plugins: { regexp: regexpPlugin },
7        rules: {
8            // Override/add rules settings here, such as:
9            "regexp/rule-name": "error"
10        }
11    }
12];

1// .eslintrc.js
2module.exports = {
3    "plugins": [
4        "regexp"
5    ],
6    "rules": {
7        // Override/add rules settings here, such as:
8        "regexp/rule-name": "error"
9    }
10}

Using the all configuration

The plugin.configs["flat/all"] / plugin:regexp/all config enables all rules. It's meant for testing, not for production use because it changes with every minor and major version of the plugin. Use it at your own risk. See lib/configs/rules/all.ts for more details.

:white_check_mark: Rules

💼 Configurations enabled in.
⚠️ Configurations set to warn in.
🟢 Set in the flat/recommended configuration.
🔵 Set in the recommended configuration.
🔧 Automatically fixable by the --fix CLI option.
💡 Manually fixable by editor suggestions.

Possible Errors

Name	Description	💼	⚠️	🔧	💡
no-contradiction-with-assertion	disallow elements that contradict assertions	🟢 🔵			💡
no-control-character	disallow control characters				💡
no-dupe-disjunctions	disallow duplicate disjunctions	🟢 🔵			💡
no-empty-alternative	disallow alternatives without elements		🟢 🔵		💡
no-empty-capturing-group	disallow capturing group that captures empty.	🟢 🔵
no-empty-character-class	disallow character classes that match no characters	🟢 🔵
no-empty-group	disallow empty group	🟢 🔵
no-empty-lookarounds-assertion	disallow empty lookahead assertion or empty lookbehind assertion	🟢 🔵
no-escape-backspace	disallow escape backspace (`[\b]`)	🟢 🔵			💡
no-invalid-regexp	disallow invalid regular expression strings in `RegExp` constructors	🟢 🔵
no-lazy-ends	disallow lazy quantifiers at the end of an expression		🟢 🔵		💡
no-misleading-capturing-group	disallow capturing groups that do not behave as one would expect	🟢 🔵			💡
no-misleading-unicode-character	disallow multi-code-point characters in character classes and quantifiers	🟢 🔵		🔧	💡
no-missing-g-flag	disallow missing `g` flag in patterns used in `String#matchAll` and `String#replaceAll`	🟢 🔵		🔧
no-optional-assertion	disallow optional assertions	🟢 🔵
no-potentially-useless-backreference	disallow backreferences that reference a group that might not be matched		🟢 🔵
no-super-linear-backtracking	disallow exponential and polynomial backtracking	🟢 🔵		🔧
no-super-linear-move	disallow quantifiers that cause quadratic moves
no-useless-assertions	disallow assertions that are known to always accept (or reject)	🟢 🔵			💡
no-useless-backreference	disallow useless backreferences in regular expressions	🟢 🔵
no-useless-dollar-replacements	disallow useless `$` replacements in replacement string	🟢 🔵
strict	disallow not strictly valid regular expressions	🟢 🔵		🔧	💡

Best Practices

Name	Description	💼	⚠️	🔧	💡
confusing-quantifier	disallow confusing quantifiers		🟢 🔵
control-character-escape	enforce consistent escaping of control characters	🟢 🔵		🔧
negation	enforce use of escapes on negation	🟢 🔵		🔧
no-dupe-characters-character-class	disallow duplicate characters in the RegExp character class	🟢 🔵		🔧
no-empty-string-literal	disallow empty string literals in character classes	🟢 🔵
no-extra-lookaround-assertions	disallow unnecessary nested lookaround assertions	🟢 🔵		🔧
no-invisible-character	disallow invisible raw character	🟢 🔵		🔧
no-legacy-features	disallow legacy RegExp features	🟢 🔵
no-non-standard-flag	disallow non-standard flags	🟢 🔵
no-obscure-range	disallow obscure character ranges	🟢 🔵
no-octal	disallow octal escape sequence				💡
no-standalone-backslash	disallow standalone backslashes (`\`)
no-trivially-nested-assertion	disallow trivially nested assertions	🟢 🔵		🔧
no-trivially-nested-quantifier	disallow nested quantifiers that can be rewritten as one quantifier	🟢 🔵		🔧
no-unused-capturing-group	disallow unused capturing group	🟢 🔵		🔧	💡
no-useless-character-class	disallow character class with one character	🟢 🔵		🔧
no-useless-flag	disallow unnecessary regex flags		🟢 🔵	🔧
no-useless-lazy	disallow unnecessarily non-greedy quantifiers	🟢 🔵		🔧
no-useless-quantifier	disallow quantifiers that can be removed	🟢 🔵		🔧	💡
no-useless-range	disallow unnecessary character ranges	🟢 🔵		🔧
no-useless-set-operand	disallow unnecessary elements in expression character classes	🟢 🔵		🔧
no-useless-string-literal	disallow string disjunction of single characters in `\q{...}`	🟢 🔵		🔧
no-useless-two-nums-quantifier	disallow unnecessary `{n,m}` quantifier	🟢 🔵		🔧
no-zero-quantifier	disallow quantifiers with a maximum of zero	🟢 🔵			💡
optimal-lookaround-quantifier	disallow the alternatives of lookarounds that end with a non-constant quantifier		🟢 🔵		💡
optimal-quantifier-concatenation	require optimal quantifiers for concatenated quantifiers	🟢 🔵		🔧
prefer-escape-replacement-dollar-char	enforces escape of replacement `$` character (`$$`).
prefer-predefined-assertion	prefer predefined assertion over equivalent lookarounds	🟢 🔵		🔧
prefer-quantifier	enforce using quantifier			🔧
prefer-range	enforce using character class range	🟢 🔵		🔧
prefer-regexp-exec	enforce that `RegExp#exec` is used instead of `String#match` if no global flag is provided
prefer-regexp-test	enforce that `RegExp#test` is used instead of `String#match` and `RegExp#exec`			🔧
prefer-set-operation	prefer character class set operations instead of lookarounds	🟢 🔵		🔧
require-unicode-regexp	enforce the use of the `u` flag			🔧
require-unicode-sets-regexp	enforce the use of the `v` flag			🔧
simplify-set-operations	require simplify set operations	🟢 🔵		🔧
sort-alternatives	sort alternatives if order doesn't matter			🔧
use-ignore-case	use the `i` flag if it simplifies the pattern	🟢 🔵		🔧

Stylistic Issues

Name	Description	💼	🔧
grapheme-string-literal	enforce single grapheme in string literal
hexadecimal-escape	enforce consistent usage of hexadecimal escape		🔧
letter-case	enforce into your favorite case		🔧
match-any	enforce match any character style	🟢 🔵	🔧
no-useless-escape	disallow unnecessary escape characters in RegExp	🟢 🔵	🔧
no-useless-non-capturing-group	disallow unnecessary non-capturing group	🟢 🔵	🔧
prefer-character-class	enforce using character class	🟢 🔵	🔧
prefer-d	enforce using `\d`	🟢 🔵	🔧
prefer-lookaround	prefer lookarounds over capturing group that do not replace		🔧
prefer-named-backreference	enforce using named backreferences		🔧
prefer-named-capture-group	enforce using named capture groups
prefer-named-replacement	enforce using named replacement		🔧
prefer-plus-quantifier	enforce using `+` quantifier	🟢 🔵	🔧
prefer-question-quantifier	enforce using `?` quantifier	🟢 🔵	🔧
prefer-result-array-groups	enforce using result array `groups`		🔧
prefer-star-quantifier	enforce using `*` quantifier	🟢 🔵	🔧
prefer-unicode-codepoint-escapes	enforce use of unicode codepoint escapes	🟢 🔵	🔧
prefer-w	enforce using `\w`	🟢 🔵	🔧
sort-character-class-elements	enforces elements order in character class		🔧
sort-flags	require regex flags to be sorted	🟢 🔵	🔧
unicode-escape	enforce consistent usage of unicode escape or unicode codepoint escape		🔧
unicode-property	enforce consistent naming of unicode properties		🔧

Removed

:no_entry: These rules have been removed in a previous major release, after they have been deprecated for a while.

Rule ID	Replaced by	Removed in version
no-assertion-capturing-group	regexp/no-empty-capturing-group	v2.0.0
no-useless-exactly-quantifier	regexp/no-useless-quantifier, regexp/no-zero-quantifier	v2.0.0
no-useless-non-greedy	regexp/no-useless-lazy	v2.0.0
order-in-character-class	regexp/sort-character-class-elements	v2.0.0
prefer-t	regexp/control-character-escape	v2.0.0

:gear: Settings

See Settings.

:traffic_light: Semantic Versioning Policy

eslint-plugin-regexp follows Semantic Versioning and ESLint's Semantic Versioning Policy.

:beers: Contributing

Welcome contributing!

Please use GitHub's Issues/PRs.

See CONTRIBUTING.md.

Development Tools

npm test runs tests and measures coverage.
npm run update runs in order to update readme and recommended configuration.
npm run new [new rule name] runs to create the files needed for the new rule.
npm run docs:watch starts the website locally.

:lock: License

See the LICENSE file for license rights and limitations (MIT).

No vulnerabilities found.

10

Maintained

Determines if the project is "actively maintained".

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

6

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

4

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 4

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/GHPages.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-regexp/GHPages.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/GHPages.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-regexp/GHPages.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/GHPages.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-regexp/GHPages.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/GHPages.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-regexp/GHPages.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/GHPages.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-regexp/GHPages.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-regexp/NodeCI.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-regexp/NodeCI.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-regexp/NodeCI.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-regexp/NodeCI.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-regexp/NodeCI.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-regexp/NodeCI.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-regexp/NodeCI.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-regexp/NodeCI.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/NodeCI.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-regexp/NodeCI.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/Release.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-regexp/Release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/Release.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-regexp/Release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/Release.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-regexp/Release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cron.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-regexp/cron.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cron.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-regexp/cron.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/cron.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/ota-meshi/eslint-plugin-regexp/cron.yml/master?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/NodeCI.yml:37
Warn: npmCommand not pinned by hash: .github/workflows/NodeCI.yml:65
Warn: npmCommand not pinned by hash: .github/workflows/cron.yml:22
Info: 0 out of 17 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 3 third-party GitHubAction dependencies pinned
Info: 6 out of 9 npmCommand dependencies pinned

1

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

Score

4.3

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to eslint-plugin-regexp

Other packages similar to eslint-plugin-regexp

eslint-plugin-regexp

Installations

Developer Guide

Yes

CommonJS

^18 || >=20

20.19.1

10.8.2

Pull Requests

4

708

51

653

Issues

16

140

124

Releases

Languages

Developer

Download Statistics

GitHub Statistics

Maintainers

Package Meta Information

Total Downloads

NaN

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

Peer Dependencies

Dev Dependencies

Introduction

:name_badge: Features

:book: Documentation

:cd: Installation

:book: Usage

The recommended configuration (New Config)

The recommended configuration (Legacy Config)

Advanced Configuration

Using the all configuration

:white_check_mark: Rules

Possible Errors

Best Practices

Stylistic Issues

Removed

:gear: Settings

:traffic_light: Semantic Versioning Policy

:beers: Contributing

Development Tools

:lock: License

10

10

10

10

6

4

1

0

0

0

0

0

0

4.3

/10