Packages

npm packages I maintain

Every actively-promoted package, with downloads over time, install commands, and links to source. The lifetime total is the site-wide figure — the same number the homepage shows, covering everything ever published; the cards below cover the packages still actively promoted, so their totals sum to less. Refreshed daily from the npm registry.

Packages listed: 43
Downloads (last 30d): 234,486
Downloads (lifetime, all packages): 877,835

@interlace/eslint-devkit

architecture

Interlace ESLint authoring toolkit (rule scaffolding + test runners)

Last 30 days: 43,833
All time: 220,420

npm install --save-dev @interlace/eslint-devkit

eslint-plugin-import-next

architecture

Drop-in replacement for eslint-plugin-import

Last 30 days: 11,844
All time: 79,865

npm install --save-dev eslint-plugin-import-next

eslint-plugin-secure-coding

security

Security-focused ESLint plugin with AI-parseable rules for detecting and preventing vulnerabilities

Last 30 days: 17,346
All time: 76,167

npm install --save-dev eslint-plugin-secure-coding

eslint-plugin-browser-security

security

Security-focused ESLint plugin for browser applications

Last 30 days: 14,503
All time: 57,130

npm install --save-dev eslint-plugin-browser-security

eslint-plugin-node-security

security

Security-focused ESLint plugin for Node

Last 30 days: 13,178
All time: 55,396

npm install --save-dev eslint-plugin-node-security

eslint-plugin-vercel-ai-security

security

Security-focused ESLint plugin for Vercel AI SDK

Last 30 days: 4,461
All time: 34,757

npm install --save-dev eslint-plugin-vercel-ai-security

eslint-plugin-react-a11y

react

React accessibility ESLint plugin with LLM-optimized rules for WCAG 2

Last 30 days: 8,046
All time: 24,596

npm install --save-dev eslint-plugin-react-a11y

eslint-plugin-nestjs-security

framework

Security-focused ESLint rules for NestJS applications

Last 30 days: 11,973
All time: 23,550

npm install --save-dev eslint-plugin-nestjs-security

eslint-plugin-maintainability

quality

ESLint rules for reducing cognitive load and ensuring code readability

Last 30 days: 8,701
All time: 22,741

npm install --save-dev eslint-plugin-maintainability

eslint-plugin-react-features

react

ESLint React rules for modern react features, hooks, and patterns

Last 30 days: 7,416
All time: 22,288

npm install --save-dev eslint-plugin-react-features

eslint-plugin-express-security

framework

Security-focused ESLint plugin for Express

Last 30 days: 4,672
All time: 21,575

npm install --save-dev eslint-plugin-express-security

eslint-plugin-conventions

quality

ESLint rules for team-specific disciplinary patterns and code conventions

Last 30 days: 7,109
All time: 17,939

npm install --save-dev eslint-plugin-conventions

eslint-plugin-reliability

quality

ESLint rules for runtime stability, fault tolerance, and type safety

Last 30 days: 6,558
All time: 17,443

npm install --save-dev eslint-plugin-reliability

eslint-plugin-modularity

quality

ESLint rules for architecture, DDD patterns, and module isolation

Last 30 days: 5,998
All time: 16,816

npm install --save-dev eslint-plugin-modularity

eslint-plugin-operability

quality

ESLint rules for production behavior, resource hygiene, and log quality

Last 30 days: 6,370
All time: 16,795

npm install --save-dev eslint-plugin-operability

eslint-plugin-modernization

quality

ESLint rules for modernizing JavaScript to ES2022+ syntax

Last 30 days: 6,623
All time: 15,622

npm install --save-dev eslint-plugin-modernization

eslint-plugin-mongodb-security

security

Security-focused ESLint plugin for MongoDB & Mongoose

Last 30 days: 2,097
All time: 10,614

npm install --save-dev eslint-plugin-mongodb-security

eslint-plugin-lambda-security

framework

Security-focused ESLint plugin for AWS Lambda and Middy applications

Last 30 days: 2,018
All time: 8,719

npm install --save-dev eslint-plugin-lambda-security

eslint-plugin-anthropic-security

security

ESLint plugin for the Anthropic SDK — hardcoded API keys, the browser escape hatch, prompt injection

Last 30 days: 1,753
All time: 7,023

npm install --save-dev eslint-plugin-anthropic-security

eslint-plugin-jwt-security

security

ESLint plugin for JWT security — algorithm confusion (CVE-2022-23540), alg:none, weak secrets, decode-without-verify

Last 30 days: 1,811
All time: 6,927

npm install --save-dev eslint-plugin-jwt-security

eslint-plugin-sqlite-security

security

ESLint plugin for better-sqlite3 / sqlite3 — SQL injection in raw queries

Last 30 days: 2,478
All time: 6,362

npm install --save-dev eslint-plugin-sqlite-security

burgee

cli

An agent-native CLI framework, drop-in compatible with commander and yargs. One declaration; help, --json, --schema, --mcp and completions all projected from it.

Last 30 days: 3,871
All time: 6,195

npm install --save-dev burgee

roundel

cli

The colours a CLI carries. One output policy, semantic tokens, a theme, and a chalk migration path lighter than chalk. Zero dependencies.

Last 30 days: 4,085
All time: 5,563

npm install --save-dev roundel

eslint-plugin-sequelize-security

security

ESLint plugin for the Sequelize ORM — SQL injection, insecure TLS config, hardcoded credentials

Last 30 days: 1,888
All time: 5,516

npm install --save-dev eslint-plugin-sequelize-security

linegauge

cli

A printer's line gauge

Last 30 days: 3,648
All time: 5,295

npm install --save-dev linegauge

eslint-plugin-knex-security

security

ESLint plugin for knex — SQL injection, insecure TLS config, hardcoded credentials

Last 30 days: 1,724
All time: 5,288

npm install --save-dev eslint-plugin-knex-security

eslint-plugin-prisma-security

security

ESLint plugin for @prisma/client — SQL injection in raw queries

Last 30 days: 1,777
All time: 5,269

npm install --save-dev eslint-plugin-prisma-security

eslint-plugin-postgresql-security

security

ESLint plugin for the pg PostgreSQL driver — SQL injection, unreleased clients, floating queries, unsafe search_path, insecure SSL

Last 30 days: 1,706
All time: 5,186

npm install --save-dev eslint-plugin-postgresql-security

eslint-plugin-typeorm-security

security

ESLint plugin for typeorm — SQL injection, insecure TLS config, hardcoded credentials

Last 30 days: 1,719
All time: 5,134

npm install --save-dev eslint-plugin-typeorm-security

eslint-plugin-drizzle-security

security

ESLint plugin for drizzle-orm — SQL injection in raw queries

Last 30 days: 1,664
All time: 5,053

npm install --save-dev eslint-plugin-drizzle-security

eslint-plugin-mcp-sdk-security

security

ESLint plugin for the MCP SDK — schemaless tools, undeclared arguments, dynamic tool descriptions, args reaching a shell

Last 30 days: 1,629
All time: 4,839

npm install --save-dev eslint-plugin-mcp-sdk-security

closeout

cli

Close everything out. Exit handlers that run exactly once on every path, terminal restore, and a bounded deadline so shutdown cannot hang. Drop-in paths for signal-exit, exit-hook and restore-cursor. Zero dependencies.

Last 30 days: 3,302
All time: 4,735

npm install --save-dev closeout

seniority

cli

Which source outranks the others. One resolution for flags, environment, project and home config files and defaults

Last 30 days: 3,204
All time: 4,563

npm install --save-dev seniority

eslint-plugin-mysql-security

security

ESLint plugin for mysql2 / mysql — SQL injection, insecure TLS config, hardcoded credentials

Last 30 days: 1,668
All time: 4,547

npm install --save-dev eslint-plugin-mysql-security

eslint-plugin-gemini-security

security

ESLint plugin for the Google Gemini SDK — BLOCK_NONE safety thresholds, hardcoded API keys, prompt injection

Last 30 days: 1,640
All time: 4,392

npm install --save-dev eslint-plugin-gemini-security

flagstaff

cli

The staff the flag flies from. A terminal frame loop with a static projection for agents and screen readers, and a plugin host for spinners, progress, boxes and tables. Drop-in paths for ora, log-update, boxen and cli-table3. No dependency outside the bur

Last 30 days: 3,173
All time: 4,308

npm install --save-dev flagstaff

paratext

cli

Everything around your terminal output that is not the output: hyperlinks, images, window title, clipboard, notifications and the bell

no data

Last 30 days: 0
All time: 4,238

npm install --save-dev paratext

bellpull

cli

The cord you pull to ring a bell in another room. Subprocesses with executable resolution and a structured result every caller can read

Last 30 days: 2,749
All time: 4,115

npm install --save-dev bellpull

caique

cli

The parrot that always answers back, and the boat that goes between ship and shore. Prompts that are flags first, so agents answer before they are asked and non-TTY callers get an error naming the flag, never a hang. Drop-in path for inquirer and clack.

Last 30 days: 2,813
All time: 4,102

npm install --save-dev caique

eslint-plugin-openai-security

security

ESLint plugin for the OpenAI SDK — dangerouslyAllowBrowser, hardcoded API keys, prompt injection