c3b-lint 0.0.10 → 0.0.11

package/README.md

@@ -5,7 +5,8 @@ markdown that a tool can check, with one command and one config to install. It r
 
 1. **ESLint** on every `.js` file — classic browser scripts under `src/` (IIFE required, no top-level declarations,
    no `console.log`), ES modules everywhere else — with `eslint:recommended` plus the rules from `frontend.md`:
-   braces on every `if`, `const`/`let` never `var`, `===`, a blank line before `return`, 500 lines max.
+   braces on every `if`, `const`/`let` never `var`, `===`, a blank line before `return`, 500 lines max, and a
+   `replace()`/`replaceAll()` whose replacement comes from data must pass a function (a string one expands `$&`).
 2. **Stylelint** on `src/**/*.css` with `stylelint-config-recommended` plus the rules from `frontend.md`: no
    `!important`, max 3 compound selectors, kebab-case ids/classes with `is-*` states and `--` variants, `:root` only
    in `tokens.css` (and `reset.css`), token names `--{category}-{role}`, `rem` font sizes, `em` letter-spacing,

package/config/eslint.config.js

@@ -46,6 +46,16 @@ const shared = {
     'eol-last': 'error'
 };
 
+// node-cli.md: a replacement that comes from data (a name, a URL, a hash) goes in as a function — a
+// string replacement expands `$&`, `$'` and `$1`, so a value with a `$` in it rewrites the output.
+// A literal second argument is fine; anything else (an identifier, a template with expressions, a
+// call) must be wrapped: `text.replace(re, () => value)`.
+const dataReplacement = {
+    selector: 'CallExpression[callee.property.name=/^replace(All)?$/][arguments.length=2]'
+            + ':not([arguments.1.type=/^(ArrowFunctionExpression|FunctionExpression|Literal)$/])',
+    message: 'A replacement from data expands $& and $1: pass a function, text.replace(re, () => value).'
+};
+
 export const browser = {
     files: ['src/**/*.js'],
     languageOptions: {
@@ -60,6 +70,7 @@ export const browser = {
         'no-console': ['error', { allow: ['warn', 'error'] }],
         'no-restricted-syntax': [
             'error',
+            dataReplacement,
             {
                 selector: 'Program > VariableDeclaration',
                 message: 'Classic scripts share one global scope: wrap the file in an IIFE and attach its API to window.App.'
@@ -94,7 +105,8 @@ export const node = {
     },
     rules: {
         ...js.configs.recommended.rules,
-        ...shared
+        ...shared,
+        'no-restricted-syntax': ['error', dataReplacement]
     }
 };
 
@@ -108,7 +120,7 @@ export const librarySrc = {
     rules: {
         ...node.rules,
         'no-console': 'off',
-        'no-restricted-syntax': 'off',
+        'no-restricted-syntax': ['error', dataReplacement],
         'no-restricted-properties': 'off',
         'no-restricted-globals': 'off'
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "c3b-lint",
-  "version": "0.0.10",
+  "version": "0.0.11",
   "description": "Lints a co:lab project against the rules a tool can check: ESLint, Stylelint, the 500-line limit and the shared .editorconfig; --init writes the config files.",
   "license": "GPL-3.0",
   "type": "module",
@@ -27,12 +27,12 @@
     "deploy": "npm run test && npm publish"
   },
   "dependencies": {
-    "@eslint/js": "9",
-    "eslint": "9",
-    "globals": "16",
-    "parse5": "7",
-    "postcss": "8",
-    "stylelint": "16",
-    "stylelint-config-recommended": "17"
+    "@eslint/js": "9.39.5",
+    "eslint": "9.39.5",
+    "globals": "16.5.0",
+    "parse5": "7.3.0",
+    "postcss": "8.5.29",
+    "stylelint": "16.26.1",
+    "stylelint-config-recommended": "17.0.0"
   }
 }