registry / @nx/eslint / 23.2.1

@nx/eslint@23.2.1

The ESLint plugin for Nx contains executors, generators and utilities used for linting JavaScript/TypeScript projects within an Nx workspace.

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 6 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

DynamicRequireEnvironmentVarsFilesystem

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 37 file(s), 300 KB of source, external domains: eslint.org, nx.dev

Source & flagged code

2 flagged

dist/internal.jsView file

Lines 1-28javascript

1"use strict";

2// Semi-private surface for first-party Nx packages.

3//

4// External plugins should NOT import from here — this entry is curated for

5// internal consumers and may change without semver protection. Mirrors

6// `@nx/devkit/internal`.

7Object.defineProperty(exports, "__esModule", { value: true });

9var eslint_file_1 = require("./src/generators/utils/eslint-file");

10Object.defineProperty(exports, "addExtendsToLintConfig", { enumerable: true, get: function () { return eslint_file_1.addExtendsToLintConfig; } });

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/internal.jsView on unpkg · L8

11Object.defineProperty(exports, "addIgnoresToLintConfig", { enumerable: true, get: function () { return eslint_file_1.addIgnoresToLintConfig; } });

12Object.defineProperty(exports, "addOverrideToLintConfig", { enumerable: true, get: function () { return eslint_file_1.addOverrideToLintConfig; } });

13Object.defineProperty(exports, "addPluginsToLintConfig", { enumerable: true, get: function () { return eslint_file_1.addPluginsToLintConfig; } });

14Object.defineProperty(exports, "addPredefinedConfigToFlatLintConfig", { enumerable: true, get: function () { return eslint_file_1.addPredefinedConfigToFlatLintConfig; } });

15Object.defineProperty(exports, "addTypedLintingToFlatConfig", { enumerable: true, get: function () { return eslint_file_1.addTypedLintingToFlatConfig; } });

16Object.defineProperty(exports, "findEslintFile", { enumerable: true, get: function () { return eslint_file_1.findEslintFile; } });

17Object.defineProperty(exports, "inspectTypedLinting", { enumerable: true, get: function () { return eslint_file_1.inspectTypedLinting; } });

18Object.defineProperty(exports, "isEslintConfigSupported", { enumerable: true, get: function () { return eslint_file_1.isEslintConfigSupported; } });

19Object.defineProperty(exports, "isTypedLintingEnabled", { enumerable: true, get: function () { return eslint_file_1.isTypedLintingEnabled; } });

20Object.defineProperty(exports, "lintConfigHasOverride", { enumerable: true, get: function () { return eslint_file_1.lintConfigHasOverride; } });

21Object.defineProperty(exports, "replaceOverridesInLintConfig", { enumerable: true, get: function () { return eslint_file_1.replaceOverridesInLintConfig; } });

22Object.defineProperty(exports, "updateOverrideInLintConfig", { enumerable: true, get: function () { return eslint_file_1.updateOverrideInLintConfig; } });

23Object.defineProperty(exports, "updateRelativePathsInConfig", { enumerable: true, get: function () { return eslint_file_1.updateRelativePathsInConfig; } });

24var ast_utils_1 = require("./src/generators/utils/flat-config/ast-utils");

25Object.defineProperty(exports, "addImportToFlatConfig", { enumerable: true, get: function () { return ast_utils_1.addImportToFlatConfig; } });

26var flat_config_1 = require("./src/utils/flat-config");

27Object.defineProperty(exports, "useFlatConfig", { enumerable: true, get: function () { return flat_config_1.useFlatConfig; } });

28var global_eslint_config_1 = require("./src/generators/init/global-eslint-config");

Long lines were clipped for display.

dist/src/generators/utils/eslint-file.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 5

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/src/generators/utils/eslint-file.js#virtual:normalized:round1View on unpkg

Source & flagged code

2 flagged · loading source

dist/internal.jsView file

8exports.versions = exports.typescriptESLintVersion = exports.getInstalledEslintVersion = exports.setupRootEsLint = exports.typeScriptOverride = exports.javaScriptOverride = exports... L9: var eslint_file_1 = require("./src/generators/utils/eslint-file"); L10: Object.defineProperty(exports, "addExtendsToLintConfig", { enumerable: true, get: function () { return eslint_file_1.addExtendsToLintConfig; } });

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/internal.jsView on unpkg · L8

dist/src/generators/utils/eslint-file.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 5

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/src/generators/utils/eslint-file.js#virtual:normalized:round1View on unpkg

Findings

1 High2 Medium3 Low

HighSemantic Analysis Limiteddist/src/generators/utils/eslint-file.js#virtual:normalized:round1

MediumDynamic Requiredist/internal.js

MediumEnvironment Vars

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @nx/eslint@23.2.1.

See all versions of @nx/eslint for other recorded verdicts.

Review the evidence and your use of @nx/eslint@23.2.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-12 18:24:38.359Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @nx

Behavioral surface

Related packages

More from @nx

Source & flagged code