The `eslint-plugin-no-http` package provides an ESLint rule specifically designed to prevent the use of insecure `http://` links in source code, enforcing the adoption of `https://` for better security and best practices. Its current stable version is `0.0.3`. Given the very low version number, it likely operates on a slow release cadence, receiving updates primarily for critical bug fixes or compatibility with newer ESLint versions rather than frequent feature additions. This plugin differentiates itself by its singular, focused purpose: identifying and flagging all instances of `http://` within strings, comments, or other relevant code contexts. It offers a straightforward, lightweight solution for teams looking to enforce HTTPS by default without integrating a broader, more complex set of security linting rules.
npm install eslint-plugin-no-httpVerified import paths — ran on the pinned version, not inferred.
This ESLint configuration enables the `no-http` plugin and sets the `no-http/no-http` rule to a warning, flagging any insecure HTTP links.
Review the plugin's source code and issues for known limitations or contribute to its development.
Run `npm install eslint --save-dev` or `yarn add eslint --dev` to install ESLint.
Verify the `.eslintrc` file (e.g., `.eslintrc.json`, `.eslintrc.js`) exists in the project root or specified path, and its syntax is correct.
Run `npm install eslint-plugin-no-http --save-dev` or `yarn add eslint-plugin-no-http --dev` to install the plugin.
Ensure `"no-http"` is in the `plugins` array and `"no-http/no-http"` is correctly spelled and configured under the `rules` section.