eslint-plugin-cli-floor

⭐ If this plugin caught a real bug for you, star the repo — it's the signal that keeps these rules maintained.

Description

The CLI floor — commander, yargs and burgee commands with descriptions, one-line examples, no console, and a flag behind every prompt.

It is the lint half of burgee's CLI floor: the requirements whose stated behaviour is a property of a program's source, which a runtime cannot hold for a program that never adopted it. They apply to any CLI built on commander or yargs — burgee or not.

Scope: every rule reads a command only when its host is proven by import — the receiver of .command() resolves, through ESLint's scope analysis, to commander's Command / program / createCommand, to a yargs() instance, to a parameter typed Command or Argv from those modules, or to the object given to burgee's defineCommand. .command(), .action() and .example() are ordinary method names that routers, job queues and ORMs own too; none of them is ever reported.

What it does not do: follow a handler or a prompt into a helper defined elsewhere, or read a command declared in another file. Where the source cannot be read — a spread, a description in a variable, a command module imported by path — the rule abstains.

• Why — a linter nobody reads protects nothing. We would rather miss a finding than spend your attention on one that was never real.
• How — evidence, not names. A rule fires on what the code does, resolved through the AST and ESLint's own scope analysis.
• What — every finding carries its fix, in prose for a human and as structured JSON for an agent. Security rules add a CWE mapping and, where assigned, a CVSS score.

That trade costs recall, and we measure it: methodology · results · a false positive is a bug.

Getting Started

• To check out the guide, visit eslint.interlace.tools. 📚

npm install eslint-plugin-cli-floor --save-dev

⚙️ Configuration Presets

Usage

// eslint.config.js
import cliFloor from 'eslint-plugin-cli-floor';

export default [cliFloor.configs.recommended];

Or wire the rules yourself:

import cliFloor from 'eslint-plugin-cli-floor';

export default [
  {
    plugins: { 'cli-floor': cliFloor },
    rules: {
      'cli-floor/no-console-in-command': 'error',
    },
  },
];

oxlint

Every rule in this plugin runs on oxlint as well as ESLint:

{ "jsPlugins": ["eslint-plugin-cli-floor/oxlint"] }

📦 Compatibility

Package	Version
commander
yargs
burgee
ESLint
Node.js

See the ESLint Version Support Policy for the full matrix.

Rules

Legend

⭐ Support & follow

If this plugin caught a real bug for you, star the repo — stars are the signal that keeps the Interlace ESLint ecosystem maintained — and follow the writeups on Dev.to for the benchmarks and security research behind these rules.

🔗 Related ESLint Plugins

Part of the Interlace ESLint ecosystem — AI-native rules with LLM-optimized error messages:

Security

Plugin	Downloads	Description
eslint-plugin-anthropic-security		Anthropic SDK security.
eslint-plugin-browser-security		XSS, DOM security.
eslint-plugin-drizzle-security		Drizzle security.
eslint-plugin-express-security		Express middleware hardening.
eslint-plugin-gemini-security		Google Gemini SDK security.
eslint-plugin-jwt-security		Token security.
eslint-plugin-knex-security		Knex security.
eslint-plugin-lambda-security		AWS Lambda hardening.
eslint-plugin-mcp-sdk-security		MCP SDK security.
eslint-plugin-mongodb-security		MongoDB injection.
eslint-plugin-mysql-security		MySQL security.
eslint-plugin-nestjs-security		NestJS framework hardening.
eslint-plugin-node-security		Server-side patterns.
eslint-plugin-openai-security		OpenAI SDK security.
eslint-plugin-postgresql-security		PostgreSQL security.
eslint-plugin-prisma-security		Prisma security.
eslint-plugin-secure-coding		Injection prevention.
eslint-plugin-sequelize-security		Sequelize ORM security.
eslint-plugin-sqlite-security		SQLite security.
eslint-plugin-supabase-security		Supabase security.
eslint-plugin-typeorm-security		TypeORM security.
eslint-plugin-vercel-ai-security		AI SDK security.

Code quality

Plugin	Downloads	Description
eslint-plugin-conventions		Team-specific habits and styles.
eslint-plugin-import-next		Fast cycle + import-graph analysis.
eslint-plugin-maintainability		Cognitive load and clean-code patterns.
eslint-plugin-modernization		ESNext migration + syntax evolution.
eslint-plugin-modularity		Structural integrity and DDD patterns.
eslint-plugin-operability		Production readiness and resource health.
eslint-plugin-react-a11y		React accessibility / WCAG.
eslint-plugin-react-features		React best practices and optimization.
eslint-plugin-reliability		Runtime stability and error safety.

📄 License

MIT © Ofri Peretz