Skip to content

Quality

quality

Node quality rules — diff size (git, language-agnostic) and eslint-security.

  • QUALITY_DIFF_SIZE is pure git diff and has no language specifics, so the node variant subclasses the Python rule and only re-declares its framework registration — one implementation, both ecosystems.
  • QUALITY_SECURITY ports the Python bandit rule's intent via eslint-plugin-security, filtering security/* findings out of the same ESLint JSON run.

NodeDiffSizeRule dataclass

Bases: DiffSizeRule

Diff-size rule for node projects — identical git-based logic.

git diff is language-agnostic, so this reuses the Python implementation wholesale; only the framework registration differs. Lives in lint like the Python DiffSizeRule.

Source code in packages/axm-audit/src/axm_audit/core/rules/node/quality.py
Python
24
25
26
27
28
29
30
31
@register_rule("lint", framework=Framework.NODE)
class NodeDiffSizeRule(DiffSizeRule):
    """Diff-size rule for node projects — identical git-based logic.

    ``git diff`` is language-agnostic, so this reuses the Python
    implementation wholesale; only the framework registration differs.
    Lives in ``lint`` like the Python ``DiffSizeRule``.
    """

NodeSecurityLintRule

Bases: NodeToolRule

Score eslint-plugin-security findings (the bandit pendant for TS/JS).

Mirrors the Python QUALITY_SECURITY: 100 - findings * 15. Reuses the project's ESLint config (which must enable eslint-plugin-security) and filters the security/* ruleIds from the JSON output.

Source code in packages/axm-audit/src/axm_audit/core/rules/node/quality.py
Python
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
@register_rule("security", framework=Framework.NODE)
class NodeSecurityLintRule(NodeToolRule):
    """Score eslint-plugin-security findings (the bandit pendant for TS/JS).

    Mirrors the Python ``QUALITY_SECURITY``: ``100 - findings * 15``. Reuses the
    project's ESLint config (which must enable eslint-plugin-security) and
    filters the ``security/*`` ruleIds from the JSON output.
    """

    binary = "eslint"
    install_hint = (
        "Install eslint-plugin-security: npm install -D eslint-plugin-security"
    )

    @property
    def rule_id(self) -> str:
        """Unique identifier (shared with the Python security rule)."""
        return "QUALITY_SECURITY"

    @property
    def args(self) -> list[str]:
        """Run ESLint over the project with the JSON formatter."""
        return ["--format", "json", "."]

    def score_output(self, parsed: object, project_path: Path) -> CheckResult:
        """Score by the count of eslint-plugin-security findings."""
        count = _count_security_messages(parsed) if isinstance(parsed, list) else 0
        score = max(0, 100 - count * 15)
        passed = count == 0
        return CheckResult(
            rule_id=self.rule_id,
            passed=passed,
            message=f"Security: {count} eslint-security finding(s)",
            severity=Severity.ERROR if not passed else Severity.INFO,
            score=score,
            details={"finding_count": count},
            fix_hint="Address the eslint-plugin-security findings" if count else None,
        )
args property

Run ESLint over the project with the JSON formatter.

rule_id property

Unique identifier (shared with the Python security rule).

score_output(parsed, project_path)

Score by the count of eslint-plugin-security findings.

Source code in packages/axm-audit/src/axm_audit/core/rules/node/quality.py
Python
72
73
74
75
76
77
78
79
80
81
82
83
84
85
def score_output(self, parsed: object, project_path: Path) -> CheckResult:
    """Score by the count of eslint-plugin-security findings."""
    count = _count_security_messages(parsed) if isinstance(parsed, list) else 0
    score = max(0, 100 - count * 15)
    passed = count == 0
    return CheckResult(
        rule_id=self.rule_id,
        passed=passed,
        message=f"Security: {count} eslint-security finding(s)",
        severity=Severity.ERROR if not passed else Severity.INFO,
        score=score,
        details={"finding_count": count},
        fix_hint="Address the eslint-plugin-security findings" if count else None,
    )