Oxlint vs Biome vs ESLint in 2026: Benchmarked on a Real Next.js Codebase
I ran ESLint 9 and 10, Oxlint 1.88 and Biome 2.5 on my own site's Next.js code (403 files) and measured speed, memory and what each migration keeps…
Open Source
⚑ Report a ProblemLatest Open Source news from Tech News
All topics
AI
agents
ai
api
architecture
automation
backend
beginners
career
database
devchallenge
devops
discuss
javascript
linux
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
testing
tutorial
typescript
webdev
13 Repos Keep a Credential in Web Storage. Seven Are Governments.
"Never put a JWT in localStorage" is the most repeated piece of frontend security advice and the least measured. So I measured it. 258,117 source fi…
Your ESLint Plugin Installs 205 Packages. 69 Are ESLint.
npm i -D eslint-plugin-import installs 205 packages . That number is true and almost useless, which is the problem with every dependency-weight argu…
I Ran My Plugins Against a Competitor's Own Test Suite
Every "we replace X" claim in the linting space is unfalsifiable, including the ones I have made. The competitor's rules are a list on a README, so…
More Agent Autonomy Needs Stronger Guardrails: React 19 Linting on ESLint 10
The more autonomy I give coding agents, the more of a repository's expectations need to be executable. I do not want manual review to be the first p…
I Replaced ESLint and Prettier with Biome
I used to juggle ESLint and Prettier every day. Two tools. Multiple config files. Plugin conflicts. Slow checks. And that constant feeling that some…
I Built What I Benchmark. Here's How I Try Not to Cheat.
On 2026-07-05, re-verifying the numbers before publishing the 17-plugin benchmark, eslint-plugin-unicorn came back 0 of 40 — a suspiciously clean ze…
I Maintain 23 Benchmark Suites Across My Own Packages. Only 1 of the Serverless Ones Has Real Numbers Yet.
Five days earlier, an audit of my own ESLint plugins found 140 files still calling context.getFilename() , getSourceCode() , and getCwd() — three AP…
Enforce Better Vue Architecture with ESLint
As Vue applications grow, keeping the codebase clean becomes increasingly challenging. At first, everyone follows the same conventions. But over tim…
Angular zoneless lint rules: enforce signals patterns
The Angular 22 release marks the end of the transition to its new paradigm designed around signals. As it was done gradually, it felt smooth. But wh…
Three SQL Injection Patterns That Still Ship in Node.js — And the ESLint Rule That Catches Them
TypeScript passed it clean. The code reviewer approved it. It shipped to production. Three months later, a penetration tester sent a report. The vul…
I Benchmarked 17 ESLint Security Plugins. Only One Found Every Vulnerability.
Skip to: Full Results | Category Breakdown | The Leaderboard | Methodology TL;DR I built a benchmark suite with 40 vulnerable code patterns across 1…
no-cycle finds 0 cycles in next.js (and other lies caches tell you)
We benchmark import-next/no-cycle against eslint-plugin-import/no-cycle and oxlint's native Rust port on next.js (131K stars, 14,556 source files).…
What ground truth caught that unit tests missed: 3 real bugs in 9 flagship lint rules
We added a npm run ilb:flagship:smoke gate to the quality script. It's small: for each flagship rule with a labeled corpus, run the rule against vul…
The Unexpected optimization in ESLint vs Vitest: A Head-to-Head
In a 2024 benchmark of 10,000+ line TypeScript codebases, Vitest outperformed ESLint ’s native rule execution by 47% in cold-start lint speed when c…