npm package discovery and stats viewer.

Discover Tips

  • General search

    [free text search, go nuts!]

  • Package details

    pkg:[package-name]

  • User packages

    @[username]

Sponsor

Optimize Toolset

I’ve always been into building performant and accessible sites, but lately I’ve been taking it extremely seriously. So much so that I’ve been building a tool to help me optimize and monitor the sites that I build to make sure that I’m making an attempt to offer the best experience to those who visit them. If you’re into performant, accessible and SEO friendly sites, you might like it too! You can check it out at Optimize Toolset.

About

Hi, 👋, I’m Ryan Hefner  and I built this site for me, and you! The goal of this site was to provide an easy way for me to check the stats on my npm packages, both for prioritizing issues and updates, and to give me a little kick in the pants to keep up on stuff.

As I was building it, I realized that I was actually using the tool to build the tool, and figured I might as well put this out there and hopefully others will find it to be a fast and useful way to search and browse npm packages as I have.

If you’re interested in other things I’m working on, follow me on Twitter or check out the open source projects I’ve been publishing on GitHub.

I am also working on a Twitter bot for this site to tweet the most popular, newest, random packages from npm. Please follow that account now and it will start sending out packages soon–ish.

Open Software & Tools

This site wouldn’t be possible without the immense generosity and tireless efforts from the people who make contributions to the world and share their work via open source initiatives. Thank you 🙏

© 2026 – Pkg Stats / Ryan Hefner

eslint-plugin-modularity

v2.6.0

Published

ESLint plugin for module architecture — enforces DDD value objects and anemic-model checks, naming, REST conventions, and utility isolation.

Downloads

4,898

Readme

⭐ If this plugin caught a real bug for you, star the repo — it's the signal that keeps these rules maintained.

Description

This plugin provides Modularity rules — module boundaries, circular dependency detection, and layered architecture.

  • Why — a linter nobody reads protects nothing. We would rather miss a finding than spend your attention on one that was never real.
  • How — evidence, not names. A rule fires on what the code does, resolved through the AST and ESLint's own scope analysis.
  • What — every finding carries its fix, in prose for a human and as structured JSON for an agent. Security rules add a CWE mapping and, where assigned, a CVSS score.

That trade costs recall, and we measure it: methodology · results · a false positive is a bug.

Getting Started

oxlint / Vite+ — the same rules under the same modularity/<rule> IDs, without ESLint:

npm install oxlint-plugin-modularity --save-dev
// .oxlintrc.json
{ "jsPlugins": ["oxlint-plugin-modularity"] }
// vite.config.ts
import { defineConfig } from 'vite-plus';

export default defineConfig({ lint: { jsPlugins: ['oxlint-plugin-modularity'] } });

ESLint:

npm install eslint-plugin-modularity --save-dev

⚙️ Configuration Presets

| Preset | Description | | :------------ | :----------------------------------------- | | recommended | Balanced DDD and architecture enforcement | | strict | All rules as errors for strict enforcement |


🏢 Usage Example

// eslint.config.js
import modularity from 'eslint-plugin-modularity';

export default [
  modularity.configs.recommended,

  // Apply strict DDD enforcement to domain layer
  {
    files: ['src/domain/**/*.ts'],
    ...modularity.configs.strict,
  },
];

Why These Rules?

ddd-anemic-domain-model

Detects domain entities that are just data containers without behavior — a common anti-pattern.

// ❌ Bad: Anemic model, no behavior
class Order {
  id: string;
  items: OrderItem[];
  status: OrderStatus;
}

// ✅ Good: Rich domain model with behavior
class Order {
  id: string;
  private items: OrderItem[];
  private status: OrderStatus;

  addItem(item: OrderItem): void {
    /* ... */
  }
  submit(): void {
    /* ... */
  }
  cancel(reason: string): void {
    /* ... */
  }
}

ddd-value-object-immutability

Value objects should be immutable. This rule catches mutable value objects.

// ❌ Bad: Mutable value object
class Money {
  amount: number; // Can be mutated!
}

// ✅ Good: Immutable value object
class Money {
  readonly amount: number;
  readonly currency: string;

  add(other: Money): Money {
    return new Money(this.amount + other.amount, this.currency);
  }
}

no-external-api-calls-in-utils

Utility modules should be pure functions without side effects like API calls.

// ❌ Bad: Utils with external dependencies
// src/utils/formatters.ts
import axios from 'axios';

export async function fetchAndFormat(id: string) {
  const data = await axios.get(`/api/${id}`); // External API call!
  return format(data);
}

// ✅ Good: Pure utility function
export function format(data: Data): FormattedData {
  return {
    /* pure transformation */
  };
}

📦 Compatibility

| Package | Version | | :--- | :--- | | ESLint | ^8.40.0 \|\| ^9.0.0 \|\| ^10.0.0 | | Node.js | >=18.0.0 |

See the ESLint Version Support Policy — current ecosystem share data, the 20% gate, and the forward-looking exception that covers v10.

Rules

Legend

| Icon | Description | | :---: | :--- | | 💼 | Recommended: Included in the recommended preset. | | ⚠️ | Warns: Set to warn in recommended preset. | | 🔧 | Auto-fixable: Automatically fixable by the --fix CLI option. | | 💡 | Suggestions: Providing code suggestions in IDE. | | 🚫 | Deprecated: This rule is deprecated. | | 🟢 | Type-unaware: AST-only, runs in oxlint JS-plugin tier. | | 🟡 | Type-aware (refining): pure-AST primary path; types refine precision. | | 🟠 | Type-aware (graceful): requires TS program; silent without it. |

| Rule | CWE | OWASP | CVSS | Description | 🧠 | 💼 | ⚠️ | 🔧 | 💡 | 🚫 | | :--- | :---: | :---: | :---: | :--- | :---: | :---: | :---: | :---: | :---: | :---: | | ddd-anemic-domain-model | | | | Detects entities with only getters/setters and no business logic, enforcing the Rich Domain Model over the… | 🟢 | | ⚠️ | | 💡 | | | ddd-value-object-immutability | | | | ESLint Rule: ddd-value-object-immutability with LLM-optimized suggestions and auto-fix capabilities. | 🟢 | 💼 | | | 💡 | | | enforce-naming | | | | Enforce domain-specific naming conventions with business context | 🟢 | | ⚠️ | | 💡 | | | enforce-rest-conventions | | | | ESLint Rule: enforce-rest-conventions with LLM-optimized suggestions and auto-fix capabilities. | 🟢 | 💼 | | | 💡 | | | no-external-api-calls-in-utils | | | | ESLint Rule: no-external-api-calls-in-utils with LLM-optimized suggestions and auto-fix capabilities. | 🟢 | 💼 | | | 💡 | | | no-mutable-exports | | | | Disallow mutable let/var declarations on exported bindings | 🟢 | | ⚠️ | | | |

🔗 Related ESLint Plugins

Part of the Interlace ESLint ecosystem — AI-native rules with LLM-optimized error messages:

Security

| Plugin | Downloads | Description | | :--- | :---: | :--- | | eslint-plugin-anthropic-security | downloads | Anthropic SDK security. | | eslint-plugin-browser-security | downloads | XSS, DOM security. | | eslint-plugin-drizzle-security | downloads | Drizzle security. | | eslint-plugin-express-security | downloads | Express middleware hardening. | | eslint-plugin-gemini-security | downloads | Google Gemini SDK security. | | eslint-plugin-jwt-security | downloads | Token security. | | eslint-plugin-knex-security | downloads | Knex security. | | eslint-plugin-lambda-security | downloads | AWS Lambda hardening. | | eslint-plugin-mcp-sdk-security | downloads | MCP SDK security. | | eslint-plugin-mongodb-security | downloads | MongoDB injection. | | eslint-plugin-mysql-security | downloads | MySQL security. | | eslint-plugin-nestjs-security | downloads | NestJS framework hardening. | | eslint-plugin-node-security | downloads | Server-side patterns. | | eslint-plugin-openai-security | downloads | OpenAI SDK security. | | eslint-plugin-postgresql-security | downloads | PostgreSQL security. | | eslint-plugin-prisma-security | downloads | Prisma security. | | eslint-plugin-secure-coding | downloads | Injection prevention. | | eslint-plugin-sequelize-security | downloads | Sequelize ORM security. | | eslint-plugin-sqlite-security | downloads | SQLite security. | | eslint-plugin-supabase-security | downloads | Supabase security. | | eslint-plugin-typeorm-security | downloads | TypeORM security. | | eslint-plugin-vercel-ai-security | downloads | AI SDK security. |

Code quality

| Plugin | Downloads | Description | | :--- | :---: | :--- | | eslint-plugin-cli-floor | downloads | CLI floor for commander, yargs and burgee. | | eslint-plugin-conventions | downloads | Team-specific habits and styles. | | eslint-plugin-import-next | downloads | Fast cycle + import-graph analysis. | | eslint-plugin-maintainability | downloads | Cognitive load and clean-code patterns. | | eslint-plugin-modernization | downloads | ESNext migration + syntax evolution. | | eslint-plugin-operability | downloads | Production readiness and resource health. | | eslint-plugin-react-a11y | downloads | React accessibility / WCAG. | | eslint-plugin-react-features | downloads | React best practices and optimization. | | eslint-plugin-reliability | downloads | Runtime stability and error safety. |

⭐ Support & follow

If this plugin caught a real bug for you, star the repo — stars are the signal that keeps the Interlace ESLint ecosystem maintained — and follow the writeups on Dev.to for the benchmarks and security research behind these rules.

GitHub stars

📄 License

MIT © Ofri Peretz