anti-slop

Evidence-first Oxlint policy for agent-written TypeScript and JavaScript.

This fork keeps the original rules from dmmulroy/anti-slop, but changes the default: mechanically strong evidence rules are enabled first; architecture and vocabulary preferences remain explicit opt-ins.

Two enforcement layers

1. Lint facts: AST-local patterns such as chained assertions and widening a known value before asserting it back.
2. Review judgment: Ponytail-inspired deletion, reuse, standard-library, native-platform, root-cause, and abstraction decisions that require repository context.

Do not turn judgment into a broad syntax ban. Do not satisfy lint by adding wrappers, aliases, interfaces, or comments that make the code larger without making it safer.

Install

Install the evidence-first profile with the bundled agent skill:

npx skills add Fato07/anti-slop --skill install-anti-slop

Then ask your coding agent to install anti-slop in the current repository. The skill installs the package and tested Oxlint version, merges the recommended rules into the existing configuration, and validates the result.

Install the contextual simplicity review separately:

npx skills add Fato07/anti-slop --skill review-simplicity

Then invoke $review-simplicity when reviewing or implementing a change.

To inspect both skills first:

npx skills add Fato07/anti-slop --list

Profiles

recommendedRules is the default:

| Severity | Rules | | --- | --- | | Error | no-chained-type-assertions, no-widen-then-assert | | Warning | no-unknown-type-aliases |

strictRules enables all 15 rules as errors. It is intentionally opinionated and permits typeof only inside named type predicates and assertion functions.

Manual installation

Install the plugin and its matched Oxlint version:

pnpm add --save-dev --save-exact @sha256_nulled/[email protected] [email protected]

import { defineConfig } from "oxlint";
import { recommendedRules } from "@sha256_nulled/oxlint-plugin-anti-slop";

export default defineConfig({
  ignorePatterns: [
    ".agent/**",
    ".agents/**",
    ".claude/**",
    ".codex/**",
    ".continue/**",
    ".cursor/**",
    ".gemini/**",
    ".opencode/**",
    ".pi/**",
    ".roo/**",
    ".windsurf/**",
  ],
  jsPlugins: [
    { name: "anti-slop", specifier: "@sha256_nulled/oxlint-plugin-anti-slop" },
  ],
  rules: {
    ...recommendedRules,
  },
});

Oxlint's JavaScript plugin interface is currently alpha. This fork pins oxlint and @oxlint/plugins to the same version and treats upgrades as tested changes rather than installation-time guesses. See the official JS plugin documentation.

Rule catalog

| Rule | Recommended | Purpose | | --- | --- | --- | | no-chained-type-assertions | error | Reject nested assertions that fabricate evidence. | | no-unknown-type-aliases | warn | Keep unknown visible at the parsing seam. | | no-widen-then-assert | error | Reject known to broad to asserted-back local flows. | | no-conditional-empty-object-spread | strict | Prefer explicit property construction. | | no-known-value-widening | strict | Preserve known literal and object evidence. | | no-module-mocking | strict | Require tests to replace dependencies through real seams. | | no-object-parameters | strict | Avoid the broad object input contract. | | no-reflect-apply | strict | Prefer typed function calls. | | no-reflect-get | strict | Prefer typed property access. | | no-runtime-typeof | strict | Concentrate primitive checks in named type guards. | | no-shape-in-symbol-names | strict | Enforce domain-role naming instead of structural naming. | | no-unknown-parameters | strict | Require parsed input contracts. | | no-unknown-returns | strict | Prevent unknown from escaping a function contract. | | no-unsafe-dictionary-type | strict | Require a concrete dictionary value contract. | | require-safety-comment-for-type-assertion | strict | Require assertions to carry a review marker. |

The strict-only rules are not universal correctness claims. Parsers, libraries, plugin systems, metaprogramming, and legacy tests often need narrow overrides or a locally edited policy.

Development

pnpm install
pnpm check

The package publishes compiled JavaScript and declarations. Oxlint loads the plugin through the package import specifier.

License

MIT