
Security News
Scaling Socket from Zero to 10,000+ Organizations
Socket CEO Feross Aboukhadijeh shares lessons from scaling a developer security startup to 10,000+ organizations in this founder interview.


Sarah Gooding
August 20, 2025
The Rspack team has announced Rslint as a new member of the Rstack family. Unlike Rspack’s Rust-based bundler, Rslint is written in Go and powered by Microsoft’s experimental typescript-go compiler. It began as a fork of tsgolint, an early proof-of-concept by @auvred, and is now being developed as part of Rspack’s broader high-performance toolchain.
This expands Rstack beyond its Rust-based bundler, Rspack, into linting and code analysis. By adopting tsgolint’s foundation, the Rspack team is betting on Go and typescript-go as the basis for typed linting.
The Rslint README encourages developers to “think of Rslint as Rust Clippy but for TypeScript," more like a TypeScript-native extension than a traditional ESLint plugin.
Rslint aims to address many long-standing pain points of the ESLint ecosystem:
At this stage, Rslint is still experimental, but the Rstack team's ambitions go beyond being “just another ESLint clone.”
Rslint’s launch coincides with Oxlint unveiling its own type-aware linting preview, which integrates with typescript-go through a slimmed-down fork of tsgolint. Together, these two announcements show that typed linting, long considered too slow to pair with native-speed Rust or Go linters, is now moving into practical territory.
The approaches share DNA but diverge in packaging and ecosystems:
no-floating-promises while keeping its Rust CLI and diagnostics pipeline.Both teams are betting that typescript-go will mature into a fast, reliable foundation for type analysis. What’s different is the level of integration: Rslint is building directly on typescript-go as its single source of truth, while Oxlint is embedding it inside a Rust-native toolchain.
Instead of consolidation, we’re watching specialization and parallel bets on what “typed linting” should look like. One path treats typed linting as a Go-native extension of the TypeScript compiler; the other as a Rust toolchain feature that delegates type checks out to Go.

Observers often ask why new linting projects emerge instead of consolidating under a single umbrella. In this case, there are a few factors that may be contributing to this trend.
In Rslint’s case, part of the explanation lies in architecture: while both Rslint and Oxlint build on typescript-go, Rslint treats it as its core whereas Oxlint embeds it inside a Rust pipeline. Ecosystem alignment also plays a role, with Rstack pursuing a TypeScript-native feel and Oxc integrating with its Rust toolchain. Reviving tsgolint was a quicker path for Rspack, while slimming and embedding it fit Oxc’s goals. Each stack is aiming for end-to-end consistency, which often favors owning the linter rather than depending on another ecosystem’s priorities.
Rather than converging on shared infrastructure, the ecosystem appears to be fragmenting into competing high-performance toolchains, each building its own linter, formatter, bundler, and test runner.
Each stack is chasing speed, tighter integration, and consistency of developer experience. Typed linting is simply the newest frontier where these competing visions are being tested.
For developers, this fragmentation means more specialized choices tailored to different workflows but also less standardization. The once-stable expectation of “just use ESLint” is giving way to a landscape where linting may depend on which toolchain you adopt.
Subscribe to our newsletter
Get notified when we publish new security blog posts!
Try it now

Security News
Socket CEO Feross Aboukhadijeh shares lessons from scaling a developer security startup to 10,000+ organizations in this founder interview.

Research
/Security News
Another wave of Shai-Hulud campaign has hit npm with more than 500 packages and 700+ versions affected.

Security News
ENISA has become a CVE Program Root, giving the EU a central authority for coordinating vulnerability reporting, disclosure, and cross-border response.