Plugin: import-nextRules
no-commonjs
Prevents CommonJS require/module.exports
💼 This rule is enabled in the following configs: recommended, typescript.
💡 This rule is manually fixable by editor suggestions.
Rule Details
This rule aims to prevent issues related to commonjs.
Options
[
{
"type": "object",
"properties": {
"allowRequire": {
"type": "boolean",
"default": false,
"description": "Allow require() calls."
},
"allowModuleExports": {
"type": "boolean",
"default": false,
"description": "Allow module.exports."
},
"allowExports": {
"type": "boolean",
"default": false,
"description": "Allow exports.* patterns."
},
"allowInFiles": {
"type": "array",
"items": {
"type": "string"
},
"description": "Allow CommonJS in specific files."
},
"suggestES6": {
"type": "boolean",
"default": true,
"description": "Suggest ES6 alternatives."
}
},
"additionalProperties": false
}
]Implementation
OWASP Foundation
- Category: A00:2021 - General Security
Use this rule
npm install -D oxlint-plugin-import-next{ "jsPlugins": ["oxlint-plugin-import-next"], "rules": { "import-next/no-commonjs": "error" }}import { defineConfig } from 'vite-plus';export default defineConfig({ lint: { jsPlugins: ['oxlint-plugin-import-next'], rules: { 'import-next/no-commonjs': 'error', }, },});oxlint-plugin-import-next re-exports eslint-plugin-import-next/oxlint: the same rules under the same IDs, and no ESLint install. Why oxlint.
Did this rule catch something? Star the repo to get new CWE coverage as we ship it — or follow the AI-code-security benchmarks behind these rules.