@putout/plugin-package-json 7.2.0 → 8.0.0

package/README.md

@@ -13,10 +13,19 @@ npm i @putout/plugin-package-json -D
 
 ## Rules
 
+- ✅ [add-type](#add-type);
+- ✅ [apply-https-to-repository-url](#apply-https-to-repository-url);
+- ✅ [find-file](#find-file);
+- ✅ [remove-nyc](#remove-nyc);
+- ✅ [remove-commit-type](#remove-commit-type);
+
+## Config
+
 ```json
 {
     "rules": {
         "package-json/add-type": "on",
+        "package-json/apply-https-to-repository-url": "on",
         "package-json/remove-nyc": "on",
         "package-json/remove-commit-type": "on",
         "package-json/find-file": "off"
@@ -36,6 +45,21 @@ Add [`type`](https://nodejs.org/dist/latest-v17.x/docs/api/packages.html#type) f
 }
 ```
 
+## apply-https-to-repository-url
+
+The `git://` protocol for GitHub repos should not be used due [security concerns](https://github.blog/security/application-security/improving-git-protocol-security-github/).
+
+Checkout in 🐊[**Putout Editor**](https://putout.cloudcmd.io/#/gist/63ab077723e3ff368fa4e3472f9a36f3/048984adbf078a7d153ea44100d3f03676aa02d5).
+
+```diff
+{
+  "repository": {
+    "type": "git",
+-   "url": "git://github.com/coderaiser/putout.git"
++   "url": "git+https://github.com/coderaiser/putout.git"
+  }
+```
+
 ## remove-nyc
 
 - additional fields in `package.json` produces more traffic then users of your package really need;

package/lib/add-type/index.js

@@ -1,7 +1,4 @@
-import {
-    operator,
-    types,
-} from 'putout';
+import {operator, types} from 'putout';
 
 const {ObjectProperty, StringLiteral} = types;
 const {

package/lib/appy-https-to-repository-url/index.js

@@ -0,0 +1,37 @@
+import {operator} from 'putout';
+
+const {
+    getProperty,
+    __json,
+    setLiteralValue,
+} = operator;
+
+export const report = () => `Apply 'https' to repository.url`;
+
+export const fix = (path) => {
+    const {value} = path.node;
+    setLiteralValue(path, value.replace('git:', 'git+https:'));
+};
+
+export const traverse = ({push}) => ({
+    [__json](path) {
+        const arg = path.get('arguments.0');
+        const repository = getProperty(arg, 'repository');
+        
+        if (!repository)
+            return;
+        
+        const value = repository.get('value');
+        const urlPathProp = getProperty(value, 'url');
+        
+        if (!urlPathProp)
+            return;
+        
+        const urlPathValue = urlPathProp.get('value');
+        
+        if (!urlPathValue.node.value.startsWith('git:'))
+            return;
+        
+        push(urlPathValue);
+    },
+});

package/lib/find-file/index.js

@@ -1,5 +1,5 @@
 import {operator} from 'putout';
-import rules from '../package-json.js';
+import {rules} from '../package-json.js';
 
 const plugin = {
     rules,

package/lib/index.js

@@ -1,4 +1,4 @@
-import packageJson from './package-json.js';
+import {rules as packageJson} from './package-json.js';
 import * as findFile from './find-file/index.js';
 
 export const rules = {

package/lib/package-json.js

@@ -1,11 +1,11 @@
 import * as addType from './add-type/index.js';
 import * as removeNyc from './remove-nyc/index.js';
 import * as removeCommitType from './remove-commit-type/index.js';
+import * as appyHttpsToRepositoryUrl from './appy-https-to-repository-url/index.js';
 
-const rules = {
+export const rules = {
     'add-type': addType,
     'remove-nyc': removeNyc,
     'remove-commit-type': removeCommitType,
+    'appy-https-to-repository-url': appyHttpsToRepositoryUrl,
 };
-
-export default rules;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@putout/plugin-package-json",
-  "version": "7.2.0",
+  "version": "8.0.0",
   "type": "module",
   "author": "coderaiser <mnemonic.enemy@gmail.com> (https://github.com/coderaiser)",
   "description": "🐊Putout plugin for package.json",
@@ -11,7 +11,7 @@
   "changelog": false,
   "repository": {
     "type": "git",
-    "url": "git://github.com/coderaiser/putout.git"
+    "url": "git+https://github.com/coderaiser/putout.git"
   },
   "scripts": {
     "test": "madrun test",
@@ -31,17 +31,17 @@
     "package-json"
   ],
   "devDependencies": {
-    "@putout/test": "^8.0.0",
-    "c8": "^8.0.0",
-    "eslint": "^8.0.1",
-    "eslint-plugin-n": "^16.0.0",
-    "eslint-plugin-putout": "^22.0.0",
+    "@putout/test": "^11.0.0",
+    "c8": "^10.0.0",
+    "eslint": "^9.0.0",
+    "eslint-plugin-n": "^17.0.0",
+    "eslint-plugin-putout": "^23.0.0",
     "lerna": "^6.0.1",
     "madrun": "^10.0.0",
     "nodemon": "^3.0.1"
   },
   "peerDependencies": {
-    "putout": ">=34"
+    "putout": ">=36"
   },
   "license": "MIT",
   "engines": {