npm - eslint-plugin-chrome-extensions - Versions diffs - 2.3.0 → 2.4.0 - Mend

eslint-plugin-chrome-extensions 2.3.0 → 2.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (29) hide show

package/README.md +646 -33
package/docs/LICENSE.md +1 -1
package/package.json +46 -35
package/src/data/apis.js +2 -3
package/src/data/i18n.js +71 -0
package/src/data/license.js +27 -0
package/src/data/manifest.js +1 -0
package/src/data/text-parser.js +11 -0
package/src/index.js +53 -1
package/src/rules/manifest-key-order.js +1 -2
package/src/rules/manifest-spacing.js +2 -1
package/src/rules/no-content-style-leak.js +5 -2
package/src/rules/no-invalid-permissions.js +2 -2
package/src/rules/no-missing-default-locale.js +91 -0
package/src/rules/no-missing-i18n-keys.js +72 -0
package/src/rules/no-missing-permissions.js +3 -3
package/src/rules/no-missing-web-accessible-resources.js +4 -4
package/src/rules/no-remote-code.js +5 -5
package/src/rules/no-unrestricted-host-permissions.js +5 -4
package/src/rules/no-unused-i18n-keys.js +54 -0
package/src/rules/no-unused-permissions.js +3 -4
package/src/rules/require-license-file.js +27 -0
package/src/rules/require-short-name-when-useful.js +71 -0
package/src/rules/valid-filenames.js +151 -0
package/src/rules/valid-license-file.js +59 -0
package/src/rules/valid-service-worker.js +2 -1
package/src/rules/valid-url-fields.js +136 -0
package/src/rules/valid-version-field.js +4 -2
package/src/utils.js +12 -13

package/README.md CHANGED Viewed

@@ -31,17 +31,16 @@ npm i -D eslint-plugin-chrome-extensions
     Usage
 </h2>
-Add bundled configs to your `eslint.config.*js`:
+Add bundled configs to your `eslint.config.*js` for each file type you need:
 ```js
 ...
 import chromeExtensions from 'eslint-plugin-chrome-extensions'
-import json from '@eslint/json'
 export default [
     // other configs
     {
-        files: ['**/extension/**/*.js'],
+        files: ['**/*extension/**/*.{cjs,js,jsx,mjs,ts,tsx}'],
         plugins: { 'chrome-extensions': chromeExtensions },
         rules: {
             ...chromeExtensions.configs.recommended.rules,
@@ -49,17 +48,22 @@ export default [
         }
     },
     {
-        files: ['**/manifest.json'], language: 'json/json',
-        plugins: { 'chrome-extensions': chromeExtensions, json },
+        files: ['**/manifest.json'], ...chromeExtensions.configs.manifest,
         rules: {
             ...chromeExtensions.configs.manifest.rules,
-            'chrome-extensions/valid-version-field': ['error', { versionType: 'date' }]  // selectively tweak rule
+            'chrome-extensions/manifest-spacing': ['warn', { spaces: 4 }]  // selectively tweak rule
         }
-    }
+    },
+    { files: ['**/*LICENSE*'],             ...chromeExtensions.configs.license },
+    { files: ['**/*extension/**/*.css'],   ...chromeExtensions.configs.css     },
+    { files: ['**/*extension/**/*.html'],  ...chromeExtensions.configs.html    },
+    { files: ['**/*extension/**/*.json'],  ...chromeExtensions.configs.json    },
+    { files: ['**/*extension/**/*.json5'], ...chromeExtensions.configs.json5   },
+    { files: ['**/*extension/**/*.jsonc'], ...chromeExtensions.configs.jsonc   }
 ]
 ```
-Available bundles: `recommended`, `strict` (everything), `problem` (deterministic bugs only), `security`, `manifest`
+Available bundles: `recommended`, `strict` (everything), `problem` (deterministic bugs only), `security`, `manifest`, `license`, `css`, `html`, `json`, `json5`, `jsonc`
 **Note:** Rule config is either a severity string (`'off'`, `'warn'`, `'error'`) or an array `[severity, options]` when the rule accepts options.
@@ -72,7 +76,7 @@ Available bundles: `recommended`, `strict` (everything), `problem` (deterministi
 <h3 id="manifest-key-order">
     <code>manifest-key-order</code>
-    <a title="Only works w/ 'json/json' config block" href="#usage">
+    <a title="Only works in 'json/json' config block" href="#usage">
         <img height=18 alt="[Manifest only]" src="https://img.shields.io/badge/Manifest_only-999999?style=flat-square" align="middle"></a>
     <a title="Accepts eslint --fix" target="_blank" href="https://eslint.org/docs/latest/use/command-line-interface#--fix">
         <img height=18 alt="[Auto-fixable]" src="https://img.shields.io/badge/Auto--fixable-3b5bdb?style=flat-square" align="middle"></a>
@@ -130,10 +134,10 @@ If you don't care about the order of manifest keys.
 - [`require-mv3`](#require-mv3)
     <a title="Included in recommended config" href="#usage"><img height=14 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
-    <a title="Works w/ 'json/json' config block" href="#usage"><img height=14 alt="[Manifest]" src="https://img.shields.io/badge/Manifest-999999?style=flat-square" align="middle"></a>
+    <a title="Works in 'json/json' config block" href="#usage"><img height=14 alt="[Manifest]" src="https://img.shields.io/badge/Manifest-999999?style=flat-square" align="middle"></a>
 - [`valid-mv3-schema`](#valid-mv3-schema)
     <a title="Included in recommended config" href="#usage"><img height=14 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
-    <a title="Works w/ 'json/json' config block" href="#usage"><img height=14 alt="[Manifest]" src="https://img.shields.io/badge/Manifest-999999?style=flat-square" align="middle"></a>
+    <a title="Works in 'json/json' config block" href="#usage"><img height=14 alt="[Manifest]" src="https://img.shields.io/badge/Manifest-999999?style=flat-square" align="middle"></a>
 <div align="center">
@@ -147,7 +151,7 @@ If you don't care about the order of manifest keys.
 <h3 id="manifest-spacing">
     <code>manifest-spacing</code>
-    <a title="Only works w/ 'json/json' config block" href="#usage">
+    <a title="Only works in 'json/json' config block" href="#usage">
         <img height=18 alt="[Manifest only]" src="https://img.shields.io/badge/Manifest_only-999999?style=flat-square" align="middle"></a>
     <a title="Accepts eslint --fix" target="_blank" href="https://eslint.org/docs/latest/use/command-line-interface#--fix">
         <img height=18 alt="[Auto-fixable]" src="https://img.shields.io/badge/Auto--fixable-3b5bdb?style=flat-square" align="middle"></a>
@@ -215,12 +219,12 @@ If you don't care about visual consistency in your manifest.
 #### See also
 - [`manifest-key-order`](#manifest-key-order)
-    <a title="Only works w/ 'json/json' config block" href="#usage"><img height=14 alt="[Manifest only]" src="https://img.shields.io/badge/Manifest_only-999999?style=flat-square" align="middle"></a>
+    <a title="Only works in 'json/json' config block" href="#usage"><img height=14 alt="[Manifest only]" src="https://img.shields.io/badge/Manifest_only-999999?style=flat-square" align="middle"></a>
     <a title="Accepts eslint --fix" target="_blank" href="https://eslint.org/docs/latest/use/command-line-interface#--fix"><img height=14 alt="[Auto-fixable]" src="https://img.shields.io/badge/Auto--fixable-3b5bdb?style=flat-square" align="middle"></a>
     <a title="Doesn't prevent bugs" href="#manifest-key-order"><img height=14 alt="[Stylistic]" src="https://img.shields.io/badge/Stylistic-af68ff?style=flat-square" align="middle"></a>
     <a title="Accepts array w/ options" href="#manifest-key-order-options"><img height=14 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
 - [`no-duplicate-manifest-keys`](#no-duplicate-manifest-keys)
-    <a title="Only works w/ 'json/json' config block" href="#usage"><img height=14 alt="[Manifest only]" src="https://img.shields.io/badge/Manifest_only-999999?style=flat-square" align="middle"></a>
+    <a title="Only works in 'json/json' config block" href="#usage"><img height=14 alt="[Manifest only]" src="https://img.shields.io/badge/Manifest_only-999999?style=flat-square" align="middle"></a>
 <div align="center">
@@ -351,7 +355,7 @@ If you don't want deprecation validation at all. For individual deprecated APIs
 <h3 id="no-duplicate-manifest-keys">
     <code>no-duplicate-manifest-keys</code>
-    <a title="Only works w/ 'json/json' config block" href="#usage">
+    <a title="Only works in 'json/json' config block" href="#usage">
         <img height=18 alt="[Manifest only]" src="https://img.shields.io/badge/Manifest_only-999999?style=flat-square" align="middle"></a>
     <a title="Copy rule URL" target="_blank"
        href="https://copy-to-clipboard.onrender.com/copy/https%3A%2F%2Fcodeberg.org%2Fadamlui%2Feslint-plugin-chrome-extensions%2F%23no-duplicate-manifest-keys">
@@ -399,12 +403,12 @@ If you rely on a Chromium fork resolving duplicate keys in a specific order.
 #### See also
 - [`manifest-key-order`](#manifest-key-order)
-    <a title="Only works w/ 'json/json' config block" href="#usage"><img height=14 alt="[Manifest only]" src="https://img.shields.io/badge/Manifest_only-999999?style=flat-square" align="middle"></a>
+    <a title="Only works in 'json/json' config block" href="#usage"><img height=14 alt="[Manifest only]" src="https://img.shields.io/badge/Manifest_only-999999?style=flat-square" align="middle"></a>
     <a title="Accepts eslint --fix" target="_blank" href="https://eslint.org/docs/latest/use/command-line-interface#--fix"><img height=14 alt="[Auto-fixable]" src="https://img.shields.io/badge/Auto--fixable-3b5bdb?style=flat-square" align="middle"></a>
     <a title="Doesn't prevent bugs" href="#manifest-key-order"><img height=14 alt="[Stylistic]" src="https://img.shields.io/badge/Stylistic-af68ff?style=flat-square" align="middle"></a>
     <a title="Accepts array w/ options" href="#manifest-key-order-options"><img height=14 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
 - [`no-unused-permissions`](#no-unused-permissions)
-    <a title="Only works w/ 'json/json' config block" href="#usage"><img height=14 alt="[Manifest only]" src="https://img.shields.io/badge/Manifest_only-999999?style=flat-square" align="middle"></a>
+    <a title="Only works in 'json/json' config block" href="#usage"><img height=14 alt="[Manifest only]" src="https://img.shields.io/badge/Manifest_only-999999?style=flat-square" align="middle"></a>
 <div align="center">
@@ -558,7 +562,7 @@ If you trust every external caller and open tab, or you intentionally broadcast
     <code>no-invalid-permissions</code>
     <a title="Included in recommended config" href="#usage">
         <img height=18 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
-    <a title="Works w/ 'json/json' config block" href="#usage">
+    <a title="Works in 'json/json' config block" href="#usage">
         <img height=18 alt="[Manifest]" src="https://img.shields.io/badge/Manifest-999999?style=flat-square" align="middle"></a>
     <a title="Accepts array w/ options" href="#usage">
         <img height=18 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
@@ -613,7 +617,186 @@ If you don't want permission validation at all. For custom permissions from a Ch
 - [`no-missing-permissions`](#no-missing-permissions)
     <a title="Included in recommended config" href="#usage"><img height=14 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
 - [`no-unused-permissions`](#no-unused-permissions)
-    <a title="Only works w/ 'json/json' config block" href="#usage"><img height=14 alt="[Manifest only]" src="https://img.shields.io/badge/Manifest_only-999999?style=flat-square" align="middle"></a>
+    <a title="Only works in 'json/json' config block" href="#usage"><img height=14 alt="[Manifest only]" src="https://img.shields.io/badge/Manifest_only-999999?style=flat-square" align="middle"></a>
+<div align="center">
+[Back to index ↑][epce-rules]
+</div>
+---
+</details>
+<h3 id="no-missing-default-locale">
+    <code>no-missing-default-locale</code>
+    <a title="Only works in 'json/json' config block" href="#usage">
+        <img height=18 alt="[Manifest only]" src="https://img.shields.io/badge/Manifest_only-999999?style=flat-square" align="middle"></a>
+    <a title="Accepts array w/ options" href="#usage">
+        <img height=18 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
+    <a title="Copy rule URL" target="_blank"
+       href="https://copy-to-clipboard.onrender.com/copy/https%3A%2F%2Fcodeberg.org%2Fadamlui%2Feslint-plugin-chrome-extensions%2F%23no-missing-default-locale">
+        <img height=16 width=21 alt="[Copy rule URL]" src="https://api.iconify.design/mdi/content-copy.svg?color=%23cccccc" align="middle"></a>
+</h3>
+<details>
+<summary>Ensures <code>default_locale</code> is declared and every <code>_locales</code> key exists in it.</summary>
+<h4 id="no-missing-default-locale-options">Options</h4>
+- `ignoreKeys` (default `[]`) – keys to skip when checking the default locale
+#### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/gray.svg" align="bottom"> Incorrect code
+```diff
+  // manifest.json
+  {
+    "manifest_version": 3,
+    "default_locale": "en",
+    "name": "__MSG_extName__"
+  }
+  // _locales/en/messages.json
+  {
+    "extName": { "message": "My Extension" }
+  }
+  // _locales/de/messages.json
+  {
+    "extName": { "message": "Meine Erweiterung" },
+!   "welcomeMsg": { "message": "Willkommen" }
+  }
+```
+#### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/green.svg" align="bottom"> Correct code
+```diff
+  // manifest.json
+  {
+    "manifest_version": 3,
+    "default_locale": "en",
+    "name": "__MSG_extName__"
+  }
+  // _locales/en/messages.json
+  {
+    "extName": { "message": "My Extension" },
++   "welcomeMsg": { "message": "Welcome" }
+  }
+  // _locales/de/messages.json
+  {
+    "extName": { "message": "Meine Erweiterung" },
+    "welcomeMsg": { "message": "Willkommen" }
+  }
+```
+#### When not to use it
+If your `_locales/` is externally populated at build time.
+#### Introduced in
+<a target="_blank" href="https://codeberg.org/adamlui/eslint-plugin-chrome-extensions/releases/tag/v2.4.0">v2.4.0</a> (October 13, 2026)
+#### See also
+- <img height=12 src="https://www.google.com/s2/favicons?domain=developer.chrome.com&sz=64">&ensp;<a target="_blank" href="https://developer.chrome.com/docs/extensions/reference/manifest/default-locale">Chrome for Developers — `default_locale`</a>
+- <img height=12 src="https://www.google.com/s2/favicons?domain=developer.chrome.com&sz=64">&ensp;<a target="_blank" href="https://developer.chrome.com/docs/extensions/reference/api/i18n">Chrome for Developers — `i18n`</a>
+<div align="center">
+[Back to index ↑][epce-rules]
+</div>
+---
+</details>
+<h3 id="no-missing-i18n-keys">
+    <code>no-missing-i18n-keys</code>
+    <a title="Included in recommended config" href="#usage">
+        <img height=18 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
+    <a title="Works in 'json/json' config block" href="#usage">
+        <img height=18 alt="[Manifest]" src="https://img.shields.io/badge/Manifest-999999?style=flat-square" align="middle"></a>
+    <a title="Works in 'css/css' config block" href="#usage">
+        <img height=18 alt="[CSS]" src="https://img.shields.io/badge/CSS-dcd6f7?style=flat-square" align="middle"></a>
+    <a title="Works in 'html/html' config block" href="#usage">
+        <img height=18 alt="[HTML]" src="https://img.shields.io/badge/HTML-a8d8ea?style=flat-square" align="middle"></a>
+    <a title="Works in 'json/json' config block" href="#usage">
+        <img height=18 alt="[JSON]" src="https://img.shields.io/badge/JSON-a8e6cf?style=flat-square" align="middle"></a>
+    <a title="Works in 'json5' config block" href="#usage">
+        <img height=18 alt="[JSON5]" src="https://img.shields.io/badge/JSON5-c7e6b8?style=flat-square" align="middle"></a>
+    <a title="Works in 'jsonc' config block" href="#usage">
+        <img height=18 alt="[JSONC]" src="https://img.shields.io/badge/JSONC-e6e6a8?style=flat-square" align="middle"></a>
+    <a title="Accepts array w/ options" href="#usage">
+        <img height=18 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
+    <a title="Copy rule URL" target="_blank"
+       href="https://copy-to-clipboard.onrender.com/copy/https%3A%2F%2Fcodeberg.org%2Fadamlui%2Feslint-plugin-chrome-extensions%2F%23no-missing-i18n-keys">
+        <img height=16 width=21 alt="[Copy rule URL]" src="https://api.iconify.design/mdi/content-copy.svg?color=%23cccccc" align="middle"></a>
+</h3>
+<details>
+<summary>Flags i18n keys used but missing from <code>_locales/&lt;default_locale&gt;/messages.json</code>.</summary>
+<h4 id="no-missing-i18n-keys-options">Options</h4>
+- `ignoreKeys` (default `[]`) – keys to skip (e.g. `['customKey']`)
+#### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/gray.svg" align="bottom"> Incorrect code
+```diff
+  // content.js
+! chrome.i18n.getMessage('greeting')
+  // manifest.json
+  {
+    "manifest_version": 3,
+!   "name": "__MSG_extName__"
+  }
+  // _locales/en/messages.json
+  { "unrelated": { "message": "…" }}
+```
+#### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/green.svg" align="bottom"> Correct code
+```diff
+  // content.js
+  chrome.i18n.getMessage('greeting')
+  // manifest.json
+  {
+    "manifest_version": 3,
+    "name": "__MSG_extName__"
+  }
+  // _locales/en/messages.json
+- { "unrelated": { "message": "…" }}
++ {
++   "greeting": { "message": "Hello" },
++   "extName": { "message": "My Extension" }
++ }
+```
+#### When not to use it
+If your `_locales/` is externally populated at build time.
+#### Introduced in
+<a target="_blank" href="https://codeberg.org/adamlui/eslint-plugin-chrome-extensions/releases/tag/v2.4.0">v2.4.0</a> (October 13, 2026)
+#### See also
+- [`no-unused-i18n-keys`](#no-unused-i18n-keys)
+    <a title="Only works in 'json/json' config block" href="#usage"><img height=14 alt="[Manifest only]" src="https://img.shields.io/badge/Manifest_only-999999?style=flat-square" align="middle"></a>
+    <a title="Accepts array w/ options" href="#no-unused-i18n-keys-options"><img height=14 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
+- <img height=12 src="https://www.google.com/s2/favicons?domain=developer.chrome.com&sz=64">&ensp;<a target="_blank" href="https://developer.chrome.com/docs/extensions/reference/api/i18n">Chrome for Developers — `i18n`</a>
 <div align="center">
@@ -677,10 +860,10 @@ If you use APIs through aliases or wrappers that obscure the original call site.
 - [`no-invalid-permissions`](#no-invalid-permissions)
     <a title="Included in recommended config" href="#usage"><img height=14 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
-    <a title="Works w/ 'json/json' config block" href="#usage"><img height=14 alt="[Manifest]" src="https://img.shields.io/badge/Manifest-999999?style=flat-square" align="middle"></a>
+    <a title="Works in 'json/json' config block" href="#usage"><img height=14 alt="[Manifest]" src="https://img.shields.io/badge/Manifest-999999?style=flat-square" align="middle"></a>
     <a title="Accepts array w/ options" href="#no-invalid-permissions-options"><img height=14 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
 - [`no-unused-permissions`](#no-unused-permissions)
-    <a title="Only works w/ 'json/json' config block" href="#usage"><img height=14 alt="[Manifest only]" src="https://img.shields.io/badge/Manifest_only-999999?style=flat-square" align="middle"></a>
+    <a title="Only works in 'json/json' config block" href="#usage"><img height=14 alt="[Manifest only]" src="https://img.shields.io/badge/Manifest_only-999999?style=flat-square" align="middle"></a>
 <div align="center">
@@ -811,10 +994,10 @@ If you intentionally target forks w/ relaxed CSPs. For individual patterns you s
 - [`require-mv3`](#require-mv3)
     <a title="Included in recommended config" href="#usage"><img height=14 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
-    <a title="Works w/ 'json/json' config block" href="#usage"><img height=14 alt="[Manifest]" src="https://img.shields.io/badge/Manifest-999999?style=flat-square" align="middle"></a>
+    <a title="Works in 'json/json' config block" href="#usage"><img height=14 alt="[Manifest]" src="https://img.shields.io/badge/Manifest-999999?style=flat-square" align="middle"></a>
 - [`valid-mv3-schema`](#valid-mv3-schema)
     <a title="Included in recommended config" href="#usage"><img height=14 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
-    <a title="Works w/ 'json/json' config block" href="#usage"><img height=14 alt="[Manifest]" src="https://img.shields.io/badge/Manifest-999999?style=flat-square" align="middle"></a>
+    <a title="Works in 'json/json' config block" href="#usage"><img height=14 alt="[Manifest]" src="https://img.shields.io/badge/Manifest-999999?style=flat-square" align="middle"></a>
 <div align="center">
@@ -828,7 +1011,7 @@ If you intentionally target forks w/ relaxed CSPs. For individual patterns you s
 <h3 id="no-unrestricted-host-permissions">
     <code>no-unrestricted-host-permissions</code>
-    <a title="Only works w/ 'json/json' config block" href="#usage">
+    <a title="Only works in 'json/json' config block" href="#usage">
         <img height=18 alt="[Manifest only]" src="https://img.shields.io/badge/Manifest_only-999999?style=flat-square" align="middle"></a>
     <a title="Accepts array w/ options" href="#usage">
         <img height=18 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
@@ -890,9 +1073,86 @@ If you legitimately need broad access (e.g. ad blockers or dev tools).
 </details>
+<h3 id="no-unused-i18n-keys">
+    <code>no-unused-i18n-keys</code>
+    <a title="Only works in 'json/json' config block" href="#usage">
+        <img height=18 alt="[Manifest only]" src="https://img.shields.io/badge/Manifest_only-999999?style=flat-square" align="middle"></a>
+    <a title="Accepts array w/ options" href="#usage">
+        <img height=18 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
+    <a title="Copy rule URL" target="_blank"
+       href="https://copy-to-clipboard.onrender.com/copy/https%3A%2F%2Fcodeberg.org%2Fadamlui%2Feslint-plugin-chrome-extensions%2F%23no-unused-i18n-keys">
+        <img height=16 width=21 alt="[Copy rule URL]" src="https://api.iconify.design/mdi/content-copy.svg?color=%23cccccc" align="middle"></a>
+</h3>
+<details>
+<summary>Flags i18n keys in <code>_locales/&lt;default_locale&gt;/messages.json</code> that are never referenced.</summary>
+<h4 id="no-unused-i18n-keys-options">Options</h4>
+- `ignoreKeys` (default `[]`) – keys to always treat as used (e.g. `['customKey']`)
+- `scanExtensions` (default `['cjs', 'css', 'htm', 'html', 'js', 'json', 'jsx', 'md', 'mjs', 'svg', 'ts', 'tsx', 'txt']`) – file extensions to scan for references
+#### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/gray.svg" align="bottom"> Incorrect code
+```diff
+  // _locales/en/messages.json
+  {
+    "usedKey": { "message": "Used message" },
+!   "unusedKey": { "message": "Unused message" }
+  }
+  // content.js
+  chrome.i18n.getMessage('usedKey')
+```
+#### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/green.svg" align="bottom"> Correct code
+```diff
+  // _locales/en/messages.json
+  {
+    "usedKey": { "message": "Used message" }
+-   "unusedKey": { "message": "Unused message" }
+  }
+  // content.js
+  chrome.i18n.getMessage('usedKey')
+```
+#### When not to use it
+If your i18n keys are referenced dynamically.
+#### Introduced in
+<a target="_blank" href="https://codeberg.org/adamlui/eslint-plugin-chrome-extensions/releases/tag/v2.4.0">v2.4.0</a> (October 13, 2026)
+#### See also
+- [`no-missing-i18n-keys`](#no-missing-i18n-keys)
+    <a title="Included in recommended config" href="#usage"><img height=14 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
+    <a title="Works in 'json/json' config block" href="#usage"><img height=14 alt="[Manifest]" src="https://img.shields.io/badge/Manifest-999999?style=flat-square" align="middle"></a>
+    <a title="Works in 'css/css' config block" href="#usage"><img height=14 alt="[CSS]" src="https://img.shields.io/badge/CSS-dcd6f7?style=flat-square" align="middle"></a>
+    <a title="Works in 'html/html' config block" href="#usage"><img height=14 alt="[HTML]" src="https://img.shields.io/badge/HTML-a8d8ea?style=flat-square" align="middle"></a>
+    <a title="Works in 'json/json' config block" href="#usage"><img height=14 alt="[JSON]" src="https://img.shields.io/badge/JSON-a8e6cf?style=flat-square" align="middle"></a>
+    <a title="Works in 'json5' config block" href="#usage"><img height=14 alt="[JSON5]" src="https://img.shields.io/badge/JSON5-c7e6b8?style=flat-square" align="middle"></a>
+    <a title="Works in 'jsonc' config block" href="#usage"><img height=14 alt="[JSONC]" src="https://img.shields.io/badge/JSONC-e6e6a8?style=flat-square" align="middle"></a>
+    <a title="Accepts array w/ options" href="#no-missing-i18n-keys-options"><img height=14 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
+- <img height=12 src="https://www.google.com/s2/favicons?domain=developer.chrome.com&sz=64">&ensp;<a target="_blank" href="https://developer.chrome.com/docs/extensions/reference/api/i18n">Chrome for Developers — `i18n`</a>
+<div align="center">
+[Back to index ↑][epce-rules]
+</div>
+---
+</details>
 <h3 id="no-unused-permissions">
     <code>no-unused-permissions</code>
-    <a title="Only works w/ 'json/json' config block" href="#usage">
+    <a title="Only works in 'json/json' config block" href="#usage">
         <img height=18 alt="[Manifest only]" src="https://img.shields.io/badge/Manifest_only-999999?style=flat-square" align="middle"></a>
     <a title="Copy rule URL" target="_blank"
        href="https://copy-to-clipboard.onrender.com/copy/https%3A%2F%2Fcodeberg.org%2Fadamlui%2Feslint-plugin-chrome-extensions%2F%23no-unused-permissions">
@@ -940,7 +1200,7 @@ If you access the granted API through an alias or computed property rather than
 - [`no-invalid-permissions`](#no-invalid-permissions)
     <a title="Included in recommended config" href="#usage"><img height=14 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
-    <a title="Works w/ 'json/json' config block" href="#usage"><img height=14 alt="[Manifest]" src="https://img.shields.io/badge/Manifest-999999?style=flat-square" align="middle"></a>
+    <a title="Works in 'json/json' config block" href="#usage"><img height=14 alt="[Manifest]" src="https://img.shields.io/badge/Manifest-999999?style=flat-square" align="middle"></a>
     <a title="Accepts array w/ options" href="#no-invalid-permissions-options"><img height=14 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
 - [`no-missing-permissions`](#no-missing-permissions)
     <a title="Included in recommended config" href="#usage"><img height=14 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
@@ -955,11 +1215,64 @@ If you access the granted API through an alias or computed property rather than
 </details>
+<h3 id="require-license-file">
+    <code>require-license-file</code>
+    <a title="Only works in 'json/json' config block" href="#usage">
+        <img height=18 alt="[Manifest only]" src="https://img.shields.io/badge/Manifest_only-999999?style=flat-square" align="middle"></a>
+    <a title="Copy rule URL" target="_blank"
+       href="https://copy-to-clipboard.onrender.com/copy/https%3A%2F%2Fcodeberg.org%2Fadamlui%2Feslint-plugin-chrome-extensions%2F%23require-license-file">
+        <img height=16 width=21 alt="[Copy rule URL]" src="https://api.iconify.design/mdi/content-copy.svg?color=%23cccccc" align="middle"></a>
+</h3>
+<details>
+<summary>Requires a license file in the extension.</summary>
+#### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/gray.svg" align="bottom"> Incorrect code
+```diff
+  // files
+  /extension/manifest.json
+!
+```
+#### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/green.svg" align="bottom"> Correct code
+```diff
+  // files
+  /extension/manifest.json
++ /extension/LICENSE
+```
+#### When not to use it
+If you intentionally omit a license, or it's injected at build time.
+#### Introduced in
+<a target="_blank" href="https://codeberg.org/adamlui/eslint-plugin-chrome-extensions/releases/tag/v2.4.0">v2.4.0</a> (October 13, 2026)
+#### See also
+- [`valid-license-file`](#valid-license-file)
+    <a title="Only works in 'license' config block" href="#usage"><img height=14 alt="[License only]" src="https://img.shields.io/badge/License_only-559bff?style=flat-square" align="middle"></a>
+    <a title="Accepts array w/ options" href="#valid-license-file-options"><img height=14 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
+<div align="center">
+[Back to index ↑][epce-rules]
+</div>
+---
+</details>
 <h3 id="require-mv3">
     <code>require-mv3</code>
     <a title="Included in recommended config" href="#usage">
         <img height=18 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
-    <a title="Works w/ 'json/json' config block" href="#usage">
+    <a title="Works in 'json/json' config block" href="#usage">
         <img height=18 alt="[Manifest]" src="https://img.shields.io/badge/Manifest-999999?style=flat-square" align="middle"></a>
     <a title="Copy rule URL" target="_blank"
        href="https://copy-to-clipboard.onrender.com/copy/https%3A%2F%2Fcodeberg.org%2Fadamlui%2Feslint-plugin-chrome-extensions%2F%23require-mv3">
@@ -1003,7 +1316,234 @@ If you intentionally target MV2 for a browser that still supports it (e.g. Firef
 - [`valid-mv3-schema`](#valid-mv3-schema)
     <a title="Included in recommended config" href="#usage"><img height=14 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
-    <a title="Works w/ 'json/json' config block" href="#usage"><img height=14 alt="[Manifest]" src="https://img.shields.io/badge/Manifest-999999?style=flat-square" align="middle"></a>
+    <a title="Works in 'json/json' config block" href="#usage"><img height=14 alt="[Manifest]" src="https://img.shields.io/badge/Manifest-999999?style=flat-square" align="middle"></a>
+<div align="center">
+[Back to index ↑][epce-rules]
+</div>
+---
+</details>
+<h3 id="require-short-name-when-useful">
+    <code>require-short-name-when-useful</code>
+    <a title="Only works in 'json/json' config block" href="#usage">
+        <img height=18 alt="[Manifest only]" src="https://img.shields.io/badge/Manifest_only-999999?style=flat-square" align="middle"></a>
+    <a title="Accepts array w/ options" href="#usage">
+        <img height=18 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
+    <a title="Copy rule URL" target="_blank"
+       href="https://copy-to-clipboard.onrender.com/copy/https%3A%2F%2Fcodeberg.org%2Fadamlui%2Feslint-plugin-chrome-extensions%2F%23require-short-name-when-useful">
+        <img height=16 width=21 alt="[Copy rule URL]" src="https://api.iconify.design/mdi/content-copy.svg?color=%23cccccc" align="middle"></a>
+</h3>
+<details>
+<summary>Requires <code>short_name</code> when <code>name</code> exceeds 12 chars.</summary>
+<h4 id="require-short-name-when-useful-options">Options</h4>
+- `maxNameLength` (default `12`) – length of `name` above which `short_name` is required
+- `always` (default `false`) – require `short_name` regardless of `name` length
+- `checkRedundant` (default `false`) – also flag `short_name` that duplicates `name`
+#### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/gray.svg" align="bottom"> Incorrect code
+```diff
+  {
+    "manifest_version": 3,
+!   "name": "Extension Infinity"
+  }
+```
+#### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/green.svg" align="bottom"> Correct code
+```diff
+  {
+    "manifest_version": 3,
+    "name": "Extension Infinity",
++   "short_name": "Extension ∞"
+  }
+```
+#### When not to use it
+If you primarily target a browser that doesn't support `short_name`.
+#### Introduced in
+<a target="_blank" href="https://codeberg.org/adamlui/eslint-plugin-chrome-extensions/releases/tag/v2.4.0">v2.4.0</a> (October 13, 2026)
+#### See also
+- <img height=12 src="https://www.google.com/s2/favicons?domain=developer.chrome.com&sz=64">&ensp;<a target="_blank" href="https://developer.chrome.com/docs/extensions/reference/manifest/short-name">Chrome for Developers — `short_name`</a>
+- <img height=12 src="https://www.google.com/s2/favicons?domain=developer.chrome.com&sz=64">&ensp;<a target="_blank" href="https://developer.chrome.com/docs/extensions/reference/manifest/name">Chrome for Developers — `name`</a>
+<div align="center">
+[Back to index ↑][epce-rules]
+</div>
+---
+</details>
+<h3 id="valid-filenames">
+    <code>valid-filenames</code>
+    <a title="Included in recommended config" href="#usage">
+        <img height=18 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
+    <a title="Works in 'json/json' config block" href="#usage">
+        <img height=18 alt="[Manifest]" src="https://img.shields.io/badge/Manifest-999999?style=flat-square" align="middle"></a>
+    <a title="Works in 'css/css' config block" href="#usage">
+        <img height=18 alt="[CSS]" src="https://img.shields.io/badge/CSS-dcd6f7?style=flat-square" align="middle"></a>
+    <a title="Works in 'html/html' config block" href="#usage">
+        <img height=18 alt="[HTML]" src="https://img.shields.io/badge/HTML-a8d8ea?style=flat-square" align="middle"></a>
+    <a title="Works in 'json/json' config block" href="#usage">
+        <img height=18 alt="[JSON]" src="https://img.shields.io/badge/JSON-a8e6cf?style=flat-square" align="middle"></a>
+    <a title="Works in 'json5' config block" href="#usage">
+        <img height=18 alt="[JSON5]" src="https://img.shields.io/badge/JSON5-c7e6b8?style=flat-square" align="middle"></a>
+    <a title="Works in 'jsonc' config block" href="#usage">
+        <img height=18 alt="[JSONC]" src="https://img.shields.io/badge/JSONC-e6e6a8?style=flat-square" align="middle"></a>
+    <a title="Accepts array w/ options" href="#usage">
+        <img height=18 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
+    <a title="Copy rule URL" target="_blank"
+       href="https://copy-to-clipboard.onrender.com/copy/https%3A%2F%2Fcodeberg.org%2Fadamlui%2Feslint-plugin-chrome-extensions%2F%23valid-filenames">
+        <img height=16 width=21 alt="[Copy rule URL]" src="https://api.iconify.design/mdi/content-copy.svg?color=%23cccccc" align="middle"></a>
+</h3>
+<details>
+<summary>Enforces valid filenames and paths.</summary>
+<h4 id="valid-filenames-options">Options</h4>
+- `noReservedPrefix` (default `true`) – disallow filenames/dirs starting w/ `_` (except `_locales`)
+- `noSpecialChars` (default `true`) – warn on chars outside `a-z`, `0-9`, `-`, `_`, `.`
+- `checkFileExists` (default `true`) – verify files referenced in `manifest.json` actually exist
+- `enforceCaseSensitivity` (default `true`) – verify manifest references match actual file case
+- `maxFullPathLength` (default `260`) – max full path char length
+#### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/gray.svg" align="bottom"> Incorrect code
+```diff
+  // files
+! /extension/_metadata/app.json
+! /extension/content script.js
+  // manifest.json
+  {
+!   "icons": { "16": "Icon16.png" },
+!   "background": { "service_worker": "missing-worker.js" }
+  }
+```
+#### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/green.svg" align="bottom"> Correct code
+```diff
+- /extension/_metadata/app.json
++ /extension/metadata/app.json
+- /extension/content script.js
++ /extension/content-script.js
+  // manifest.json
+  {
+-   "icons": { "16": "Icon16.png" },
++   "icons": { "16": "icon16.png" },
+-   "background": { "service_worker": "missing-worker.js" }
++   "background": { "service_worker": "service-worker.js" }
+  }
+```
+#### When not to use it
+If you don't use conventional filenames or paths, or they're generated at build time.
+#### Introduced in
+<a target="_blank" href="https://codeberg.org/adamlui/eslint-plugin-chrome-extensions/releases/tag/v2.4.0">v2.4.0</a> (October 13, 2026)
+#### See also
+- [`no-missing-web-accessible-resources`](#no-missing-web-accessible-resources)
+    <a title="Included in recommended config" href="#usage"><img height=14 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
+- [`valid-manifest-icons`](#valid-manifest-icons)
+    <a title="Only works in 'json/json' config block" href="#usage"><img height=14 alt="[Manifest only]" src="https://img.shields.io/badge/Manifest_only-999999?style=flat-square" align="middle"></a>
+    <a title="Accepts array w/ options" href="#valid-manifest-icons-options"><img height=14 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
+<div align="center">
+[Back to index ↑][epce-rules]
+</div>
+---
+</details>
+<h3 id="valid-license-file">
+    <code>valid-license-file</code>
+    <a title="Only works in 'license' config block" href="#usage">
+        <img height=18 alt="[License only]" src="https://img.shields.io/badge/License_only-559bff?style=flat-square" align="middle"></a>
+    <a title="Accepts array w/ options" href="#usage">
+        <img height=18 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
+    <a title="Copy rule URL" target="_blank"
+       href="https://copy-to-clipboard.onrender.com/copy/https%3A%2F%2Fcodeberg.org%2Fadamlui%2Feslint-plugin-chrome-extensions%2F%23valid-license-file">
+        <img height=16 width=21 alt="[Copy rule URL]" src="https://api.iconify.design/mdi/content-copy.svg?color=%23cccccc" align="middle"></a>
+</h3>
+<details>
+<summary>Validates SPDX identifiers in license files.</summary>
+<h4 id="valid-license-file-options">Options</h4>
+- `requireSPDX` (default `false`) – require <a target="_blank" href="https://spdx.dev/learn/handling-license-info/">`SPDX-License-Identifier`</a> in the license
+- `allowedLicenses` (default `[]`) – <a target="_blank" href="https://spdx.org/licenses/">SPDX license IDs</a> to restrict to (e.g. `['Apache-2.0', 'MIT']`), as a single string or array
+#### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/gray.svg" align="bottom"> Incorrect code
+```diff
+  /* eslint chrome-extensions/valid-license-file: ['error', { requireSPDX: true, allowedLicenses: ['MIT'] }] */
+  // LICENSE.md
+  MIT License
+  Copyright © 2026 You
+!
+```
+#### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/green.svg" align="bottom"> Correct code
+```diff
+  /* eslint chrome-extensions/valid-license-file: ['error', { requireSPDX: true, allowedLicenses: ['MIT'] }] */
+  // LICENSE.md
+  MIT License
+  Copyright © 2026 You
++ SPDX-License-Identifier: MIT
+```
+#### When not to use it
+If your license is injected at build time, or you use a license w/ no SPDX identifier.
+#### Introduced in
+<a target="_blank" href="https://codeberg.org/adamlui/eslint-plugin-chrome-extensions/releases/tag/v2.4.0">v2.4.0</a> (October 13, 2026)
+#### See also
+- <img height=12 src="https://www.google.com/s2/favicons?domain=spdx.org&sz=64">&ensp;<a target="_blank" href="https://spdx.org/licenses/">SPDX — License List</a>
+- [`require-license-file`](#require-license-file)
+    <a title="Only works in 'json/json' config block" href="#usage"><img height=14 alt="[Manifest only]" src="https://img.shields.io/badge/Manifest_only-999999?style=flat-square" align="middle"></a>
 <div align="center">
@@ -1017,7 +1557,7 @@ If you intentionally target MV2 for a browser that still supports it (e.g. Firef
 <h3 id="valid-manifest-icons">
     <code>valid-manifest-icons</code>
-    <a title="Only works w/ 'json/json' config block" href="#usage">
+    <a title="Only works in 'json/json' config block" href="#usage">
         <img height=18 alt="[Manifest only]" src="https://img.shields.io/badge/Manifest_only-999999?style=flat-square" align="middle"></a>
     <a title="Accepts array w/ options" href="#usage">
         <img height=18 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
@@ -1090,7 +1630,7 @@ If your icons are injected at build time, or you target browsers that support SV
     <code>valid-mv3-schema</code>
     <a title="Included in recommended config" href="#usage">
         <img height=18 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
-    <a title="Works w/ 'json/json' config block" href="#usage">
+    <a title="Works in 'json/json' config block" href="#usage">
         <img height=18 alt="[Manifest]" src="https://img.shields.io/badge/Manifest-999999?style=flat-square" align="middle"></a>
     <a title="Copy rule URL" target="_blank"
        href="https://copy-to-clipboard.onrender.com/copy/https%3A%2F%2Fcodeberg.org%2Fadamlui%2Feslint-plugin-chrome-extensions%2F%23valid-mv3-schema">
@@ -1140,7 +1680,7 @@ If you intentionally target MV2 for a browser that still supports it (e.g. Firef
 - [`require-mv3`](#require-mv3)
     <a title="Included in recommended config" href="#usage"><img height=14 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
-    <a title="Works w/ 'json/json' config block" href="#usage"><img height=14 alt="[Manifest]" src="https://img.shields.io/badge/Manifest-999999?style=flat-square" align="middle"></a>
+    <a title="Works in 'json/json' config block" href="#usage"><img height=14 alt="[Manifest]" src="https://img.shields.io/badge/Manifest-999999?style=flat-square" align="middle"></a>
 - [`no-deprecated-apis`](#no-deprecated-apis)
     <a title="Included in recommended config" href="#usage"><img height=14 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
     <a title="Accepts array w/ options" href="#no-deprecated-apis-options"><img height=14 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
@@ -1202,7 +1742,7 @@ If your background context isn't a service worker.
 - [`require-mv3`](#require-mv3)
     <a title="Included in recommended config" href="#usage"><img height=14 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
-    <a title="Works w/ 'json/json' config block" href="#usage"><img height=14 alt="[Manifest]" src="https://img.shields.io/badge/Manifest-999999?style=flat-square" align="middle"></a>
+    <a title="Works in 'json/json' config block" href="#usage"><img height=14 alt="[Manifest]" src="https://img.shields.io/badge/Manifest-999999?style=flat-square" align="middle"></a>
 - [`no-remote-code`](#no-remote-code)
     <a title="Included in recommended config" href="#usage"><img height=14 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
     <a title="Included in security config" href="#usage"><img height=14 alt="[Security]" src="https://img.shields.io/badge/Security-e8357a?style=flat-square" align="middle"></a>
@@ -1218,11 +1758,84 @@ If your background context isn't a service worker.
 </details>
+<h3 id="valid-url-fields">
+    <code>valid-url-fields</code>
+    <a title="Only works in 'json/json' config block" href="#usage">
+        <img height=18 alt="[Manifest only]" src="https://img.shields.io/badge/Manifest_only-999999?style=flat-square" align="middle"></a>
+    <a title="Accepts array w/ options" href="#usage">
+        <img height=18 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
+    <a title="Copy rule URL" target="_blank"
+       href="https://copy-to-clipboard.onrender.com/copy/https%3A%2F%2Fcodeberg.org%2Fadamlui%2Feslint-plugin-chrome-extensions%2F%23valid-url-fields">
+        <img height=16 width=21 alt="[Copy rule URL]" src="https://api.iconify.design/mdi/content-copy.svg?color=%23cccccc" align="middle"></a>
+</h3>
+<details>
+<summary>Validates URLs and match patterns in manifest fields.</summary>
+<h4 id="valid-url-fields-options">Options</h4>
+- `checkURLfields` (default `true`) – validate URL fields (<a target="_blank" href="https://developer.chrome.com/docs/extensions/reference/manifest/chrome-settings-override">`chrome_settings_overrides`</a>, <a target="_blank" href="https://developer.chrome.com/docs/extensions/reference/manifest/homepage-url">`homepage_url`</a>, <a target="_blank" href="https://developer.chrome.com/docs/extensions/reference/manifest/oauth2">`oauth2.scopes`</a>, <a target="_blank" href="https://developer.chrome.com/docs/apps/autoupdate#update_url">`update_url`</a>)
+- `checkMatchPatterns` (default `true`) – validate match patterns (in <a target="_blank" href="https://developer.chrome.com/docs/extensions/reference/manifest/content-scripts">`content_scripts`</a>, <a target="_blank" href="https://developer.chrome.com/docs/extensions/reference/manifest/externally-connectable">`externally_connectable`</a>, <a target="_blank" href="https://developer.chrome.com/docs/extensions/develop/concepts/declare-permissions#host-permissions">`host_permissions`</a>, <a target="_blank" href="https://developer.chrome.com/docs/extensions/develop/concepts/declare-permissions">`optional_host_permissions`</a>, <a target="_blank" href="https://developer.chrome.com/docs/extensions/reference/manifest/web-accessible-resources">`web_accessible_resources`</a>)
+- `allowedSchemes` (default `['https', 'file']`) – permitted URL schemes for <a target="_blank" href="https://developer.chrome.com/docs/extensions/develop/concepts/match-patterns">match patterns</a>
+- `allowAllURLs` (default `false`) – allow unrestricted patterns (<a target="_blank" href="https://developer.chrome.com/docs/extensions/develop/concepts/match-patterns">`<all_urls>`</a>, <a target="_blank" href="https://developer.chrome.com/docs/extensions/develop/concepts/match-patterns">`https://*/*`</a>, <a target="_blank" href="https://developer.chrome.com/docs/extensions/develop/concepts/match-patterns">`*://*/*`</a>)
+#### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/gray.svg" align="bottom"> Incorrect code
+```diff
+  {
+    "manifest_version": 3,
+!   "homepage_url": "not-a-url",
+!   "host_permissions": ["https://*"],
+!   "content_scripts": [{ "js": ["content.js"], "matches": ["*://*foo.com/*"] }],
+!   "web_accessible_resources": [{ "resources": ["logo.png"], "matches": ["https://example.com/specific-path"] }]
+  }
+```
+#### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/green.svg" align="bottom"> Correct code
+```diff
+  {
+    "manifest_version": 3,
+-   "homepage_url": "not-a-url",
++   "homepage_url": "https://example.com",
+-   "host_permissions": ["https://*"],
++   "host_permissions": ["https://example.com/*"],
+-   "content_scripts": [{ "js": ["content.js"], "matches": ["*://*foo.com/*"] }],
++   "content_scripts": [{ "js": ["content.js"], "matches": ["*://*.foo.com/*"] }],
+-   "web_accessible_resources": [{ "resources": ["logo.png"], "matches": ["https://example.com/specific-path"] }]
++   "web_accessible_resources": [{ "resources": ["logo.png"], "matches": ["https://example.com/*"] }]
+  }
+```
+#### When not to use it
+If your URLs or match patterns are generated at build time.
+#### Introduced in
+<a target="_blank" href="https://codeberg.org/adamlui/eslint-plugin-chrome-extensions/releases/tag/v2.4.0">v2.4.0</a> (October 13, 2026)
+#### See also
+- <img height=12 src="https://www.google.com/s2/favicons?domain=developer.chrome.com&sz=64">&ensp;<a target="_blank" href="https://developer.chrome.com/docs/extensions/develop/concepts/declare-permissions">Chrome for Developers — Declare permissions</a>
+- <img height=12 src="https://www.google.com/s2/favicons?domain=developer.chrome.com&sz=64">&ensp;<a target="_blank" href="https://developer.chrome.com/docs/extensions/develop/concepts/match-patterns">Chrome for Developers — Match patterns</a>
+<div align="center">
+[Back to index ↑][epce-rules]
+</div>
+---
+</details>
 <h3 id="valid-version-field">
     <code>valid-version-field</code>
     <a title="Included in recommended config" href="#usage">
         <img height=18 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
-    <a title="Works w/ 'json/json' config block" href="#usage">
+    <a title="Works in 'json/json' config block" href="#usage">
         <img height=18 alt="[Manifest]" src="https://img.shields.io/badge/Manifest-999999?style=flat-square" align="middle"></a>
     <a title="Accepts array w/ options" href="#usage">
         <img height=18 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>