Packages

npm packages I maintain

Every actively-promoted package, with downloads over time, install commands, and links to source. The lifetime total is the site-wide figure — the same number the homepage shows, covering everything ever published; the cards below cover the packages still actively promoted, so their totals sum to less. Refreshed daily from the npm registry.

Packages listed: 76
Downloads (last 30d): 149,276
Downloads (lifetime, all packages): 1,318,638

@interlace/eslint-devkit

architecture

Interlace ESLint authoring toolkit (rule scaffolding + test runners)

Last 30 days: 24,729
All time: 307,356

npm install --save-dev @interlace/eslint-devkit

eslint-plugin-secure-coding

security

Security-focused ESLint plugin with AI-parseable rules for detecting and preventing vulnerabilities

Last 30 days: 6,705
All time: 107,217

npm install --save-dev eslint-plugin-secure-coding

eslint-plugin-import-next

architecture

Drop-in replacement for eslint-plugin-import

Last 30 days: 9,142
All time: 96,687

npm install --save-dev eslint-plugin-import-next

eslint-plugin-browser-security

security

Security-focused ESLint plugin for browser applications

Last 30 days: 12,037
All time: 76,942

npm install --save-dev eslint-plugin-browser-security

eslint-plugin-node-security

security

Security-focused ESLint plugin for Node

Last 30 days: 8,170
All time: 75,935

npm install --save-dev eslint-plugin-node-security

eslint-plugin-nestjs-security

framework

Security-focused ESLint rules for NestJS applications

Last 30 days: 9,645
All time: 56,554

npm install --save-dev eslint-plugin-nestjs-security

eslint-plugin-vercel-ai-security

security

Security-focused ESLint plugin for Vercel AI SDK

Last 30 days: 4,120
All time: 44,867

npm install --save-dev eslint-plugin-vercel-ai-security

eslint-plugin-react-a11y

react

React accessibility ESLint plugin with LLM-optimized rules for WCAG 2

Last 30 days: 2,256
All time: 36,269

npm install --save-dev eslint-plugin-react-a11y

eslint-plugin-express-security

framework

Security-focused ESLint plugin for Express

Last 30 days: 3,757
All time: 32,087

npm install --save-dev eslint-plugin-express-security

eslint-plugin-maintainability

quality

ESLint rules for reducing cognitive load and ensuring code readability

Last 30 days: 4,021
All time: 29,869

npm install --save-dev eslint-plugin-maintainability

eslint-plugin-react-features

react

ESLint React rules for modern react features, hooks, and patterns

Last 30 days: 5,144
All time: 29,055

npm install --save-dev eslint-plugin-react-features

eslint-plugin-conventions

quality

ESLint rules for team-specific disciplinary patterns and code conventions

Last 30 days: 2,039
All time: 23,668

npm install --save-dev eslint-plugin-conventions

eslint-plugin-reliability

quality

ESLint rules for runtime stability, fault tolerance, and type safety

Last 30 days: 1,709
All time: 22,546

npm install --save-dev eslint-plugin-reliability

eslint-plugin-operability

quality

ESLint rules for production behavior, resource hygiene, and log quality

Last 30 days: 2,314
All time: 21,996

npm install --save-dev eslint-plugin-operability

eslint-plugin-modularity

quality

ESLint rules for architecture, DDD patterns, and module isolation

Last 30 days: 2,293
All time: 21,809

npm install --save-dev eslint-plugin-modularity

eslint-plugin-modernization

quality

ESLint rules for modernizing JavaScript to ES2022+ syntax

Last 30 days: 1,645
All time: 20,691

npm install --save-dev eslint-plugin-modernization

eslint-plugin-mongodb-security

security

Security-focused ESLint plugin for MongoDB & Mongoose

Last 30 days: 3,505
All time: 17,256

npm install --save-dev eslint-plugin-mongodb-security

eslint-plugin-lambda-security

framework

Security-focused ESLint plugin for AWS Lambda and Middy applications

Last 30 days: 1,775
All time: 15,715

npm install --save-dev eslint-plugin-lambda-security

eslint-plugin-jwt-security

security

ESLint plugin for JWT security — algorithm confusion (CVE-2022-23540), alg:none, weak secrets, decode-without-verify

Last 30 days: 2,919
All time: 13,496

npm install --save-dev eslint-plugin-jwt-security

eslint-plugin-anthropic-security

security

ESLint plugin for the Anthropic SDK — hardcoded API keys, the browser escape hatch, prompt injection

Last 30 days: 2,231
All time: 12,369

npm install --save-dev eslint-plugin-anthropic-security

eslint-plugin-sqlite-security

security

ESLint plugin for better-sqlite3 / sqlite3 — SQL injection in raw queries

Last 30 days: 2,300
All time: 12,347

npm install --save-dev eslint-plugin-sqlite-security

eslint-plugin-postgresql-security

security

ESLint plugin for the pg PostgreSQL driver — SQL injection, unreleased clients, floating queries, unsafe search_path, insecure SSL

Last 30 days: 2,305
All time: 12,241

npm install --save-dev eslint-plugin-postgresql-security

burgee

cli

An agent-native CLI framework, drop-in compatible with commander and yargs. One declaration; help, --json, --schema, --mcp and completions all projected from it.

Last 30 days: 2,140
All time: 11,154

npm install --save-dev burgee

eslint-plugin-prisma-security

security

ESLint plugin for @prisma/client — SQL injection in raw queries

Last 30 days: 1,943
All time: 10,646

npm install --save-dev eslint-plugin-prisma-security

eslint-plugin-sequelize-security

security

ESLint plugin for the Sequelize ORM — SQL injection, insecure TLS config, hardcoded credentials

Last 30 days: 2,015
All time: 10,627

npm install --save-dev eslint-plugin-sequelize-security

eslint-plugin-knex-security

security

ESLint plugin for knex — SQL injection, insecure TLS config, hardcoded credentials

Last 30 days: 1,977
All time: 10,545

npm install --save-dev eslint-plugin-knex-security

eslint-plugin-typeorm-security

security

ESLint plugin for typeorm — SQL injection, insecure TLS config, hardcoded credentials

Last 30 days: 2,008
All time: 10,306

npm install --save-dev eslint-plugin-typeorm-security

eslint-plugin-mcp-sdk-security

security

ESLint plugin for the MCP SDK — schemaless tools, undeclared arguments, dynamic tool descriptions, args reaching a shell

Last 30 days: 2,137
All time: 10,160

npm install --save-dev eslint-plugin-mcp-sdk-security

eslint-plugin-drizzle-security

security

ESLint plugin for drizzle-orm — SQL injection in raw queries

Last 30 days: 1,839
All time: 10,046

npm install --save-dev eslint-plugin-drizzle-security

eslint-plugin-gemini-security

security

ESLint plugin for the Google Gemini SDK — BLOCK_NONE safety thresholds, hardcoded API keys, prompt injection

Last 30 days: 1,900
All time: 9,721

npm install --save-dev eslint-plugin-gemini-security

eslint-plugin-mysql-security

security

ESLint plugin for mysql2 / mysql — SQL injection, insecure TLS config, hardcoded credentials

Last 30 days: 1,852
All time: 9,647

npm install --save-dev eslint-plugin-mysql-security

eslint-plugin-openai-security

security

ESLint plugin for the OpenAI SDK — dangerouslyAllowBrowser, hardcoded API keys, prompt injection

Last 30 days: 1,823
All time: 8,928

npm install --save-dev eslint-plugin-openai-security

roundel

cli

The colours a CLI carries. One output policy, semantic tokens, a theme, and a chalk migration path lighter than chalk. Zero dependencies.

Last 30 days: 1,341
All time: 8,905

npm install --save-dev roundel

linegauge

cli

A printer's line gauge

Last 30 days: 1,388
All time: 8,298

npm install --save-dev linegauge

closeout

cli

Close everything out. Exit handlers that run exactly once on every path, terminal restore, and a bounded deadline so shutdown cannot hang. Drop-in paths for signal-exit, exit-hook and restore-cursor. Zero dependencies.

Last 30 days: 1,702
All time: 8,023

npm install --save-dev closeout

seniority

cli

Which source outranks the others. One resolution for flags, environment, project and home config files and defaults

Last 30 days: 1,575
All time: 7,690

npm install --save-dev seniority

bellpull

cli

The cord you pull to ring a bell in another room. Subprocesses with executable resolution and a structured result every caller can read

Last 30 days: 1,079
All time: 7,258

npm install --save-dev bellpull

eslint-plugin-supabase-security

security

ESLint plugin for Supabase security

Last 30 days: 1,572
All time: 6,819

npm install --save-dev eslint-plugin-supabase-security

caique

cli

The parrot that always answers back, and the boat that goes between ship and shore. Prompts that are flags first, so agents answer before they are asked and non-TTY callers get an error naming the flag, never a hang. Drop-in path for inquirer and clack.

Last 30 days: 2,045
All time: 6,699

npm install --save-dev caique

flagstaff

cli

The staff the flag flies from. A terminal frame loop with a static projection for agents and screen readers, and a plugin host for spinners, progress, boxes and tables. Drop-in paths for ora, log-update, boxen and cli-table3. No dependency outside the bur

Last 30 days: 1,482
All time: 6,220

npm install --save-dev flagstaff

paratext

cli

Everything around your terminal output that is not the output: hyperlinks, images, window title, clipboard, notifications and the bell

Last 30 days: 1,394
All time: 5,689

npm install --save-dev paratext

oxmutate

quality

Mutation testing for JavaScript and TypeScript on the oxc engine, run warm inside the project's own Vitest, with CI lanes, SARIF and an agent surface. No dependency outside the burgee family. A Stryker migration path.

Last 30 days: 0
All time: 4,029

npm install --save-dev oxmutate

oxlint-plugin-secure-coding

security

The secure-coding rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-secure-coding.

Last 30 days: 0
All time: 2,301

npm install --save-dev oxlint-plugin-secure-coding

controlroom

cli

Keyboard-driven terminal screens, inline or full-screen, with a static projection for pipes, CI and --json. No dependency outside the burgee family; react and react-reconciler are optional peers, loaded only by controlroom/ink. Drop-in path for ink.

Last 30 days: 1,248
All time: 2,207

npm install --save-dev controlroom

oxlint-plugin-node-security

security

The node-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-node-security.

Last 30 days: 0
All time: 1,859

npm install --save-dev oxlint-plugin-node-security

oxlint-plugin-import-next

architecture

The import-next rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-import-next.

Last 30 days: 0
All time: 1,669

npm install --save-dev oxlint-plugin-import-next

oxlint-plugin-browser-security

security

The browser-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-browser-security.

Last 30 days: 0
All time: 1,397

npm install --save-dev oxlint-plugin-browser-security

oxlint-plugin-prisma-security

security

The prisma-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-prisma-security.

Last 30 days: 0
All time: 1,256

npm install --save-dev oxlint-plugin-prisma-security

oxlint-plugin-express-security

framework

The express-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-express-security.

Last 30 days: 0
All time: 1,243

npm install --save-dev oxlint-plugin-express-security

oxlint-plugin-vercel-ai-security

security

The vercel-ai-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-vercel-ai-security.

Last 30 days: 0
All time: 1,237

npm install --save-dev oxlint-plugin-vercel-ai-security

oxlint-plugin-typeorm-security

security

The typeorm-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-typeorm-security.

Last 30 days: 0
All time: 1,236

npm install --save-dev oxlint-plugin-typeorm-security

oxlint-plugin-drizzle-security

security

The drizzle-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-drizzle-security.

Last 30 days: 0
All time: 1,213

npm install --save-dev oxlint-plugin-drizzle-security

oxlint-plugin-sequelize-security

security

The sequelize-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-sequelize-security.

Last 30 days: 0
All time: 1,210

npm install --save-dev oxlint-plugin-sequelize-security

oxlint-plugin-lambda-security

framework

The lambda-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-lambda-security.

Last 30 days: 0
All time: 1,201

npm install --save-dev oxlint-plugin-lambda-security

oxlint-plugin-nestjs-security

framework

The nestjs-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-nestjs-security.

Last 30 days: 0
All time: 1,196

npm install --save-dev oxlint-plugin-nestjs-security

oxlint-plugin-postgresql-security

security

The postgresql-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-postgresql-security.

Last 30 days: 0
All time: 1,184

npm install --save-dev oxlint-plugin-postgresql-security

oxlint-plugin-mongodb-security

security

The mongodb-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-mongodb-security.

Last 30 days: 0
All time: 1,178

npm install --save-dev oxlint-plugin-mongodb-security

oxlint-plugin-knex-security

security

The knex-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-knex-security.

Last 30 days: 0
All time: 1,157

npm install --save-dev oxlint-plugin-knex-security

oxlint-plugin-mcp-sdk-security

security

The mcp-sdk-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-mcp-sdk-security.

Last 30 days: 0
All time: 1,133

npm install --save-dev oxlint-plugin-mcp-sdk-security

oxlint-plugin-react-features

react

The react-features rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-react-features.

Last 30 days: 0
All time: 1,095

npm install --save-dev oxlint-plugin-react-features

oxlint-plugin-conventions

quality

The conventions rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-conventions.

Last 30 days: 0
All time: 1,059

npm install --save-dev oxlint-plugin-conventions

oxlint-plugin-react-a11y

react

The react-a11y rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-react-a11y.

Last 30 days: 0
All time: 1,048

npm install --save-dev oxlint-plugin-react-a11y

oxlint-plugin-mysql-security

security

The mysql-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-mysql-security.

Last 30 days: 0
All time: 1,042

npm install --save-dev oxlint-plugin-mysql-security

oxlint-plugin-anthropic-security

security

The anthropic-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-anthropic-security.

Last 30 days: 0
All time: 1,035

npm install --save-dev oxlint-plugin-anthropic-security

oxlint-plugin-jwt-security

security

The jwt-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-jwt-security.

Last 30 days: 0
All time: 1,034

npm install --save-dev oxlint-plugin-jwt-security

oxlint-plugin-operability

quality

The operability rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-operability.

Last 30 days: 0
All time: 1,024

npm install --save-dev oxlint-plugin-operability

oxlint-plugin-gemini-security

security

The gemini-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-gemini-security.

Last 30 days: 0
All time: 1,024

npm install --save-dev oxlint-plugin-gemini-security

oxlint-plugin-modernization

quality

The modernization rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-modernization.

Last 30 days: 0
All time: 1,010

npm install --save-dev oxlint-plugin-modernization

oxlint-plugin-reliability

quality

The reliability rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-reliability.

Last 30 days: 0
All time: 997

npm install --save-dev oxlint-plugin-reliability

oxlint-plugin-sqlite-security

security

The sqlite-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-sqlite-security.

Last 30 days: 0
All time: 971

npm install --save-dev oxlint-plugin-sqlite-security

oxlint-plugin-maintainability

quality

The maintainability rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-maintainability.

Last 30 days: 0
All time: 959

npm install --save-dev oxlint-plugin-maintainability

oxlint-plugin-modularity

quality

The modularity rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-modularity.

Last 30 days: 0
All time: 959

npm install --save-dev oxlint-plugin-modularity

oxlint-plugin-openai-security

security

The openai-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-openai-security.

Last 30 days: 0
All time: 928

npm install --save-dev oxlint-plugin-openai-security

oxlint-plugin-supabase-security

security

The supabase-security rules for oxlint and Vite+. Same rules and rule IDs as eslint-plugin-supabase-security.

Last 30 days: 0
All time: 894

npm install --save-dev oxlint-plugin-supabase-security

@interlace/eslint-formatter-sarif

quality

SARIF v2.1.0 formatter for ESLint

Last 30 days: 50
All time: 184

npm install --save-dev @interlace/eslint-formatter-sarif

@interlace/eslint-formatter

quality

Smart ESLint formatter

Last 30 days: 5
All time: 129

npm install --save-dev @interlace/eslint-formatter