pkg.soopen package index

npm / rank 784

Install xo with npm

JavaScript/TypeScript linter (ESLint wrapper) with great defaults. Version 4.0.0 via npm; verified 2026-07-06.

install

Additional install commands

Portable and language managers

npmverified · 100%
npm install -g xo

local npm package metadata

overview

Package summary

JavaScript/TypeScript linter (ESLint wrapper) with great defaults

Commands and aliases

  • xo

security posture

No protected-tool coverage found yet

No matching local secret-handling manifest was found for xo. Package metadata is still published here so future coverage has a stable package URL.

Install behavior

  • npm lifecycle scripts are declared: prepare.
  • No npm postinstall script is recorded in package metadata.
  • npm package metadata declares a prepare script.
  • No Homebrew bottle metadata was recorded.
  • Installs with 19 runtime dependencies.
  • Build metadata lists 9 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
xocliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-08-04
manager version4.0.0
manager updated2026-07-06
local dataok
upstreamnot checked
latest detectednot detected

https://github.com/xojs/xo

install metadata

Package metadata

Package keynpm:xo
Version4.0.0
Package managernpm
Package manager pagehttps://www.npmjs.com/package/xo
Homepagehttps://github.com/xojs/xo#readme
Repositoryhttps://github.com/xojs/xo
Upstream docshttps://github.com/xojs/xo#readme
LicenseMIT
Source archivehttps://registry.npmjs.org/xo/-/xo-4.0.0.tgz
Issue trackerhttps://github.com/xojs/xo/issues
Last updated2026-07-06T23:11:26.344Z
Published2026-07-06T23:11:26.344Z
Pulseupdated
Dependencies@sindresorhus/tsconfig, arrify, cosmiconfig, define-lazy-prop, eslint, eslint-config-xo, eslint-formatter-pretty, find-cache-directory, get-stdin, get-tsconfig, globby, jiti, meow, micromatch, open-editor, path-exists, prettier, type-fest, typescript
Build dependencies@types/micromatch, @types/node, dedent, eslint-plugin-vue, execa, husky, np, temp-dir, xo
Bottlenot recorded
npm postinstallnot defined
Servicenone declared
Keywordscli-app, cli, xo, xoxo, happy, happiness, code, quality, style, lint, linter, jshint, jslint, eslint, validate, code style

registry facts

Source database details

Source Databasenpm registry
Dist Tags
Version Count146
Maintainers
  • sindresorhus
AuthorSindre Sorhus
Publishersindresorhus
Engines
Fundinghttps://github.com/sponsors/sindresorhus
Integritysha512-230aBWg2e2oAB1R60mh/naJ50k0YfLdkb4LZEn4D1WzaQwDxjj6btnoFPX/Go4E7EPhkKpsgZf4KllcL0XlPUg==
Shasum78285d81415e531a398cd6f5ee27d2f40d64ab35
Unpacked Size93,814
File Count0
Created At2012-05-24T04:56:46.528Z
Latest Published At2026-07-06T23:11:26.344Z
Modified At2026-07-06T23:11:26.470Z

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • cross-ecosystem install command graph
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • pkg.so package database
  • pkgdb category and tag curation