# solhint
> Solidity Code Linter
Latest version **6.2.4** (published 2026-08-13) · MIT license · 0 weekly downloads
## Install
```sh
npm install solhint
pnpm add solhint
yarn add solhint
bun add solhint
```
Provides the command `solhint`.
## Health
**Score 55/100 (C)** — status: active.
Positive: no vulnerabilities; recently updated; high maintenance score.
Warnings: low downloads; no types; no esm support.
## Facts
| | |
|---|---|
| Version | 6.2.4 |
| Published | 2026-08-13 |
| First published | 2017-09-25 |
| Weekly downloads | 0 |
| License | MIT |
| TypeScript types | none |
| Module format | CommonJS |
| Node | >=20 |
| Dependencies | 17 |
| Unpacked size | 375.7 KB |
| Known vulnerabilities | 0 |
| Install scripts | no |
| GitHub stars | 1125 |
| Author | Ilya Drabenia |
| Maintainers | diego.bale.arg |
| Keywords | solidity, linter, security-scanner, ethereum, ast, developer-tools, code-quality, smart-contracts |
## Links
- npm: https://www.npmjs.com/package/solhint
- Repository: https://github.com/protofire/solhint
- Homepage: https://protofire.github.io/solhint/
- Issues: https://github.com/protofire/solhint/issues
- npm.io page: https://npm.io/package/solhint
## Dependencies (17)
- [ajv](https://npm.io/package/ajv.md) ^8.18.0
- [glob](https://npm.io/package/glob.md) ^13.0.6
- [chalk](https://npm.io/package/chalk.md) ^4.1.2
- [table](https://npm.io/package/table.md) ^6.8.1
- [ignore](https://npm.io/package/ignore.md) ^5.2.4
- [lodash](https://npm.io/package/lodash.md) ^4.17.21
- [semver](https://npm.io/package/semver.md) ^7.5.2
- [js-yaml](https://npm.io/package/js-yaml.md) ^4.1.0
- [commander](https://npm.io/package/commander.md) ^10.0.0
- [fast-diff](https://npm.io/package/fast-diff.md) ^1.2.0
- [pluralize](https://npm.io/package/pluralize.md) ^8.0.0
- [text-table](https://npm.io/package/text-table.md) ^0.2.0
- [ast-parents](https://npm.io/package/ast-parents.md) ^0.0.1
- [cosmiconfig](https://npm.io/package/cosmiconfig.md) ^8.0.0
- [latest-version](https://npm.io/package/latest-version.md) ^7.0.0
- [better-ajv-errors](https://npm.io/package/better-ajv-errors.md) ^2.0.2
- [@solidity-parser/parser](https://npm.io/package/@solidity-parser/parser.md) ^0.20.2
## Alternatives
- [update-check](https://npm.io/package/update-check.md) — 4.0M weekly downloads
- [react-native-onesignal](https://npm.io/package/react-native-onesignal.md) — 134.5K weekly downloads
- [react-redux-toastr](https://npm.io/package/react-redux-toastr.md) — 33.7K weekly downloads
- [@nocobase/plugin-notification-manager](https://npm.io/package/@nocobase/plugin-notification-manager.md) — 2.0K weekly downloads
- [react-simple-toasts](https://npm.io/package/react-simple-toasts.md) — 1.9K weekly downloads
## Recent versions
- 6.2.4 (latest) — 2026-08-13
- 3.0.0-rc.8 (next) — 2020-04-18
- 6.2.3 — 2026-06-19
- 6.2.2 — 2026-06-15
- 6.2.1 — 2026-04-01
- 6.2.0 — 2026-03-31
- 6.1.0 — 2026-03-17
- 6.0.3 — 2026-01-20
- 6.0.2 — 2025-12-18
- 6.0.1 — 2025-08-22
- 6.0.0 — 2025-07-04
- 5.2.0 — 2025-06-27
- 5.1.0 — 2025-05-05
- 5.0.5 — 2025-01-16
- 5.0.4 — 2024-12-31
- … 84 more at https://npm.io/package/solhint/versions
## README
By Protofire
[](https://protofire.io/solhint)
[](https://discord.gg/4TYGq3zpjs)
[](https://etherscan.io/address/0xA81705c8C247C413a19A244938ae7f4A0393944e)
[](https://npmjs.org/package/solhint)
[](https://raw.githubusercontent.com/protofire/solhint/master/LICENSE)
This is an open source project for linting [Solidity](http://solidity.readthedocs.io/en/develop/) code. This project
provides both **Security** and **Style Guide** validations.
[VISIT OUR WEBSITE](https://protofire.io/solhint)
[JOIN OUR DISCORD SERVER](https://discord.gg/4TYGq3zpjs)
Tech Lead: [dbale-arg](https://github.com/dbale-arg)
## Installation
You can install Solhint using **npm**:
```sh
npm install -g solhint
# verify that it was installed correctly
solhint --version
```
## Usage
First initialize a configuration file, if you don't have one:
```sh
solhint --init
```
This will create a `.solhint.json` file with the recommended rules enabled. Then run Solhint with one or more [Globs](https://en.wikipedia.org/wiki/Glob_(programming)) as arguments. For example, to lint all files inside `contracts` directory, you can do:
```sh
solhint 'contracts/**/*.sol'
```
To lint a single file:
```sh
solhint contracts/MyToken.sol
```
Run `solhint` without arguments to get more information:
```text
Usage: solhint [options] [...other_files]
Linter for Solidity programming language
Options:
-V, --version output the version number
-f, --formatter [name] report formatter name (stylish, table, tap, unix, json, compact, sarif)
-w, --max-warnings [maxWarningsNumber] number of allowed warnings, works in quiet mode as well
-c, --config [file_name] file to use as your rules configuration file (not compatible with multiple configs)
-q, --quiet report errors only - default: false
--ignore-path [file_name] file to use as your .solhintignore
--fix automatically fix problems and show report
--cache only lint files that changed since last run
--cache-location path to the cache file
--noPrompt do not suggest to backup files when any `fix` option is selected
--init create configuration file for solhint
--disc do not check for solhint updates
--save save report to file on current folder
--noPoster remove discord poster
-h, --help output usage information
Commands:
stdin [options] linting of source code data provided to STDIN
list-rules display covered rules of current .solhint.json
```
### New Versions
- Solhint checks if there are newer versions. The `--disc` option avoids that check.
- `--save` option will create a file named as `YYYYMMDDHHMMSS_solhintReport.txt` on current folder with default or specified format
### Fix
This option currently works on:
- avoid-throw
- avoid-sha3
- no-console
- explicit-types
- private-vars-underscore
- payable-fallback
- quotes
- contract-name-capwords
- avoid-suicide
## Configuration
You can use a `.solhint.json` file to configure Solhint for the whole project.
To generate a new sample `.solhint.json` file in current folder you can do:
```sh
solhint --init
```
This file has the following format:
### Default
```json
{
"extends": "solhint:recommended"
}
```
The `solhint:default` configuration contains only two rules: max-line-length & no-console
It is now deprecated since version 5.1.0
### Multiple Configs
Multiple configs files can be used at once. All config files should be named `.solhint.json`.
If not done like this, multiple hierarchy configuration will not work.
Solhint will go through all config files automatically.
Given this structure:
```
Project ROOT =>
/contracts
---> RootAndContractRules.sol
---> .solhint.json
/src
--->RootRules.sol
--->interfaces/
------->InterfaceRules.sol
------->solhint.json
.solhint.json
```
- Solhint config located on `root` will be the main one.
- When analyzing `RootRules.sol`, `root` file config will be used that file.
- `InterfaceRules.sol` will be using the one inside its own folder taking precedence over the `root` folder one.
- Rules not present in `interfaces/` folder and present in `root` will be active.
- Rules not present in `root` folder and present in `interfaces/` folder will be active.
- If rule is present in both files, the closest to the analyzed file will take precedence. Meaning when analyzing `InterfaceRules.sol` the config file located in `Interfaces/` will be used with the remaining rules of the `root` one.
### Sample of simple config with recommended rules
```json
{
"extends": "solhint:recommended",
"plugins": [],
"rules": {
"avoid-suicide": "error",
"avoid-sha3": "warn"
}
}
```
A full list of all supported rules can be found [here](docs/rules.md).
### Plugins and `pluginPaths`
Solhint resolves plugins using Node resolution from:
1. `process.cwd()` (default behavior, unchanged)
2. each configured entry in `pluginPaths`
3. each configured `/node_modules`
This makes plugin loading work in environments where Solhint runs outside the project folder (for example IDE/editor integrations), while preserving the standard local `node_modules` behavior.
Example:
```json
{
"pluginPaths": ["/some/path"],
"plugins": ["myplugin"],
"rules": {
"myplugin/some-rule": "error"
}
}
```
If a plugin fails to load, Solhint will warn and continue linting with core rules and any other valid plugins.
### Ignore Configuration
You can exclude files from linting using a `.solhintignore` file (name by default) or `--ignore-path` followed by a custom name.
It uses the same syntax as `.gitignore`, including support for negation with !.
Example:
```
contracts/**
!contracts/utils/
!contracts/utils/SafeMath.sol
```
This will:
- Ignore everything inside contracts/
- Except the folder contracts/utils/
- And the file SafeMath.sol inside it
Tip: To unignore a file, you must also unignore its parent folders.
### Cache
Solhint supports a caching mechanism using the `--cache` flag to avoid re-linting files that haven't changed.
When enabled, Solhint stores a hash of each file's content and effective configuration, skipping analysis if neither has changed.
By default, the cache is saved in `.solhintcache.json` in the current working directory.
You can customize this location using the `--cache-location option`. If no location is specified, the file will be stored in:
`node_modules/.cache/solhint/.solhint-cache.json`
Warning:
When using `cache` flag. If a file was analyzed with not error for a certain config, the hash will be stored. If the file is not changed but the config file (`.solhint.json`) has some new rules, the file will not be analyzed.
To analyze it again, remove `cache` option.
Example:
```
solhint contracts/**/*.sol --cache
solhint Foo.sol --cache --cache-location tmp/my-cache.json
```
### Extendable rulesets
The rulesets provided by solhint are the following:
+ solhint:default (deprecated since version v5.1.0)
+ solhint:recommended
Use one of these as the value for the "extends" property in your configuration file.
### Configure the linter with comments
You can use comments in the source code to configure solhint in a given line or file.
For example, to disable all validations in the line following a comment:
```solidity
// solhint-disable-next-line
uint[] a;
```
You can disable specific rules on a given line. For example:
```solidity
// solhint-disable-next-line not-rely-on-time, not-rely-on-block-hash
uint pseudoRand = uint(keccak256(abi.encodePacked(now, blockhash(block.number))));
```
Disable validation on current line:
```solidity
uint pseudoRand = uint(keccak256(abi.encodePacked(now, blockhash(block.number)))); // solhint-disable-line
```
Disable specific rules on current line:
```solidity
uint pseudoRand = uint(keccak256(abi.encodePacked(now, blockhash(block.number)))); // solhint-disable-line not-rely-on-time, not-rely-on-block-hash
```
You can disable a rule for a group of lines:
```solidity
/* solhint-disable avoid-tx-origin */
function transferTo(address to, uint amount) public {
require(tx.origin == owner);
to.call.value(amount)();
}
/* solhint-enable avoid-tx-origin */
```
Or disable all validations for a group of lines:
```solidity
/* solhint-disable */
function transferTo(address to, uint amount) public {
require(tx.origin == owner);
to.call.value(amount)();
}
/* solhint-enable */
```
## Rules
### Security Rules
[Full list with all supported Security Rules](docs/rules.md#security-rules)
### Style Guide Rules
[Full list with all supported Style Guide Rules](docs/rules.md#style-guide-rules)
### Best Practices Rules
[Full list with all supported Best Practices Rules](docs/rules.md#best-practices-rules)
## Docker
### Solhint has an official Docker Image
Go to docker folder and follow [this](docker/docker.md) instructions.
## pre-commit
### Solhint can also be used as [pre-commit](https://pre-commit.com/) hook
Replace `$GIT_TAG` with real tag:
```YAML
- repo: https://github.com/protofire/solhint
rev: $GIT_TAG
hooks:
- id: solhint
```
## Documentation
Related documentation you may find [here](https://protofire.github.io/solhint/).
## IDE Integrations
- **[Sublime Text 3](https://packagecontrol.io/search/solhint)**
- **[Atom](https://atom.io/packages/atom-solidity-linter)**
- **[Vim](https://github.com/sohkai/syntastic-local-solhint)**
- **[JetBrains IDEA, WebStorm, CLion, etc.](https://plugins.jetbrains.com/plugin/10177-solidity-solhint)**
- **[VS Code: Solidity by Juan Blanco](
https://marketplace.visualstudio.com/items?itemName=JuanBlanco.solidity)**
- **[VS Code: Solidity Language Support by CodeChain.io](
https://marketplace.visualstudio.com/items?itemName=kodebox.solidity-language-server)**
## Table of Contents
* [Contributing](docs/contributing.md): The core Solhint team :heart: contributions. This describes how you can contribute to the Solhint Project.
* [Shareable configs](docs/shareable-configs.md): How to create and share your own configurations.
* [Writing plugins](docs/writing-plugins.md): How to extend Solhint with your own rules.
## Plugins
- [solhint-plugin-prettier](https://github.com/fvictorio/solhint-plugin-prettier): Integrate Solhint
with the [Solidity plugin for Prettier](https://github.com/prettier-solidity/prettier-plugin-solidity).
## Who uses Solhint?
[
](https://github.com/OpenZeppelin)
[
](https://github.com/poanetwork) [
](https://github.com/0xProject) [
](https://github.com/gnosis)
### Projects
- OpenZeppelin:
- [openzeppelin-contracts](https://github.com/OpenZeppelin/openzeppelin-contracts)
- POA Network - Public EVM Sidechain:
- [Proof of Physical Address (PoPA)](https://github.com/poanetwork/poa-popa)
- [Proof of Bank Account (PoBA)](https://github.com/poanetwork/poa-poba)
- 0x-Project
- [0x-Monorepo](https://github.com/0xProject/0x-monorepo/tree/development/contracts)
- Gnosis:
- [Gnosis Prediction Market Contracts](https://github.com/gnosis/pm-contracts)
- [The DutchX decentralized trading protocol](https://github.com/gnosis/dex-contracts)
## Acknowledgements
The Solidity parser used is [`@solidity-parser/parser`](https://github.com/solidity-parser/parser).
## License
MIT
## Back us
Solhint is free to use and open-sourced. If you value our effort and feel like helping us to keep pushing this tool forward, you can send us a small donation. We'll highly appreciate it :)
[](https://etherscan.io/address/0xA81705c8C247C413a19A244938ae7f4A0393944e)
## Related projects
- [eth-cli](https://github.com/protofire/eth-cli): CLI swiss army knife for Ethereum developers.
---
_Source: https://npm.io/package/solhint · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._