eslint-plugin-chrome-extensions 2.4.1 → 2.5.0

package/src/data/i18n.js

@@ -1,71 +1,13 @@
-/* eslint-disable security/detect-non-literal-fs-filename -- lint-time project inspection only */
-
-import fs from 'node:fs'
-import path from 'node:path'
-
-export const re = {
-    getMsgLiteral: /\b(?:chrome|browser)\.i18n\.getMessage\(\s*['"]([^'"]+)['"]/g,
-    getMsgTemplate: /\b(?:chrome|browser)\.i18n\.getMessage\(\s*`([^`]*)`/g,
-    msgPlaceholder: /__MSG_([\w@]+)__/g,
-    specialChars: /[.*+?^${}()|[\]\\]/g,
-    templateExpr: /\$\{[^}]*\}/g
-}
-
-export function collectUsedKeys(root, scanExtensions) {
-    const used = new Set(),
-          patterns = [],
-          exts = new Set(scanExtensions),
-          stack = [root]
-    while (stack.length) {
-        const dir = stack.pop()
-        let entries
-        try { entries = fs.readdirSync(dir, { withFileTypes: true }) } catch { continue }
-        for (const entry of entries) {
-            if (entry.name.startsWith('.') || entry.name == 'node_modules') continue
-            const full = path.join(dir, entry.name)
-            if (entry.isDirectory()) { stack.push(full) ; continue }
-            const ext = path.extname(entry.name).slice(1).toLowerCase()
-            if (!exts.has(ext)) continue
-            let text
-            try { text = fs.readFileSync(full, 'utf8') } catch { continue }
-            for (const match of text.matchAll(re.msgPlaceholder))
-                if (!isPredefined(match[1])) used.add(match[1])
-            for (const match of text.matchAll(re.getMsgLiteral))
-                used.add(match[1])
-            for (const match of text.matchAll(re.getMsgTemplate)) {
-                const body = match[1]
-                if (body.includes('${')) patterns.push(templateToPattern(body))
-                else used.add(body)
-            }
-        }
-    }
-    return { used, patterns }
-}
-
-export const defaultScanExtensions = [
-    'cjs', 'css', 'htm', 'html', 'js', 'json', 'jsx', 'md', 'mjs', 'svg', 'ts', 'tsx', 'txt']
-
-export function findExtensionRoot(startPath) {
-    let dir = path.dirname(startPath)
-    while (dir != path.dirname(dir)) {
-        if (fs.existsSync(path.join(dir, 'manifest.json'))) return dir
-        dir = path.dirname(dir)
+export default {
+    defaultScanExtensions: ['cjs', 'css', 'htm', 'html', 'js', 'json', 'jsx', 'md', 'mjs', 'svg', 'ts', 'tsx', 'txt'],
+    re: {
+        getMsg: {
+            literal: /\b(?:browser|chrome)\.i18n\.getMessage\(\s*['"]([^'"]+)['"]/g,
+            path: /^(?:browser|chrome)\.i18n\.getMessage$/,
+            template: /\b(?:browser|chrome)\.i18n\.getMessage\(\s*`([^`]*)`/g
+        },
+        msgPlaceholder: /__MSG_([\w@]+)__/g,
+        specialChars: /[.*+?^${}()|[\]\\]/g,
+        templateExpr: /\$\{[^}]*\}/g
     }
 }
-
-export function isPredefined(key) { return key.startsWith('@@') }
-
-export function readDefaultLocaleMessages(manifest, root) {
-    const locale = manifest?.default_locale
-    if (typeof locale != 'string') return null
-    const filePath = path.join(root, '_locales', locale, 'messages.json')
-    let messages
-    try { messages = JSON.parse(fs.readFileSync(filePath, 'utf8')) } catch { return null }
-    if (!messages || typeof messages != 'object' || Array.isArray(messages)) return null
-    return { locale, messages }
-}
-
-export function templateToPattern(body) {
-    const parts = body.split(re.templateExpr).map(part => part.replace(re.specialChars, '\\$&'))
-    return new RegExp(`^${parts.join('.*')}$`) // eslint-disable-line security/detect-non-literal-regexp
-}

package/src/data/manifest.js

@@ -1,61 +1,65 @@
 import globals from 'globals'
 
 const serviceWorkerGlobals = new Set(Object.keys(globals.serviceworker || {}))
-export const domGlobals = new Set(Object.keys(globals.browser).filter(name => !serviceWorkerGlobals.has(name)))
 
-export const ffDataCollectionRequired = new Set([
-    'none', 'authenticationInfo', 'bookmarksInfo', 'browsingActivity', 'financialAndPaymentInfo', 'healthInfo',
-    'locationInfo', 'personalCommunications', 'personallyIdentifyingInfo', 'searchTerms', 'websiteActivity',
-    'websiteContent'
-])
-
-export const ffDataCollectionOptional = new Set([
-    'authenticationInfo', 'bookmarksInfo', 'browsingActivity', 'financialAndPaymentInfo', 'healthInfo', 'locationInfo',
-    'personalCommunications', 'personallyIdentifyingInfo', 'searchTerms', 'technicalAndInteraction', 'websiteActivity',
-    'websiteContent'
-])
-
-export const ffMV3bgKeys = new Set(['scripts', 'page'])
-
-export const forbiddenCSPdirectives = [
-    `'unsafe-eval'`, `'unsafe-inline'`, `'unsafe-hashes'`, `'wasm-unsafe-eval'`, 'http://', 'https://']
-
-export const manifestKeyOrder = [
-    // platform-required
-    'manifest_version', 'name', 'version',
-    // CWS-required
-    'description', 'icons',
-    // optional
-    'action', 'author', 'background', 'browser_specific_settings', 'chrome_settings_overrides', 'chrome_url_overrides',
-    'commands', 'content_scripts', 'content_security_policy', 'cross_origin_embedder_policy',
-    'cross_origin_opener_policy', 'dark_theme', 'declarative_net_request', 'default_locale', 'developer',
-    'devtools_page', 'dictionaries', 'export', 'externally_connectable', 'homepage_url', 'host_permissions', 'import',
-    'incognito', 'key', 'mime_types_handler', 'minimum_chrome_version', 'oauth2', 'omnibox',
-    'optional_host_permissions', 'optional_permissions', 'options_page', 'options_ui', 'permissions',
-    'protocol_handlers', 'requirements', 'sandbox', 'short_name', 'sidebar_action', 'side_panel', 'storage', 'theme',
-    'theme_experiment', 'tts_engine', 'update_url', 'version_name', 'web_accessible_resources'
-]
-
-export const matchPaths = new Set([
-    'content_scripts.matches', 'externally_connectable.matches',
-    'host_permissions', 'optional_host_permissions', 'web_accessible_resources.matches'
-])
-
-export const mv2OnlyKeys = new Set(['browser_action', 'page_action'])
-
-export const remoteCodePatterns = [
-    'eval', 'new-function', 'string-timer', 'dynamic-import', 'remote-script-src', 'execute-script-url']
-
-export const serviceWorkerKeepaliveMinMS = 30000
-
-export const urlPaths = new Set([
-    'homepage_url', 'update_url', 'oauth2.scopes',
-    'chrome_settings_overrides.homepage',
-    'chrome_settings_overrides.search_provider.alternate_urls',
-    'chrome_settings_overrides.search_provider.favicon_url',
-    'chrome_settings_overrides.search_provider.image_url',
-    'chrome_settings_overrides.search_provider.instant_url',
-    'chrome_settings_overrides.search_provider.search_url',
-    'chrome_settings_overrides.search_provider.suggest_url',
-    'chrome_settings_overrides.startup_pages'
-])
+export default {
+    csp: {
+        forbiddenDirectives: [
+            `'unsafe-eval'`, `'unsafe-inline'`, `'unsafe-hashes'`, `'wasm-unsafe-eval'`, 'http://', 'https://']
+    },
+    globals: {
+        dom: new Set(Object.keys(globals.browser).filter(name => !serviceWorkerGlobals.has(name))) },
+    keys: {
+        ff: {
+            dataCollectionOptional: new Set([
+                'authenticationInfo', 'bookmarksInfo', 'browsingActivity', 'financialAndPaymentInfo',
+                'healthInfo', 'locationInfo', 'personalCommunications', 'personallyIdentifyingInfo',
+                'searchTerms', 'technicalAndInteraction', 'websiteActivity', 'websiteContent'
+            ]),
+            dataCollectionRequired: new Set([
+                'none', 'authenticationInfo', 'bookmarksInfo', 'browsingActivity', 'financialAndPaymentInfo',
+                'healthInfo', 'locationInfo', 'personalCommunications', 'personallyIdentifyingInfo', 'searchTerms',
+                'websiteActivity', 'websiteContent'
+            ]),
+            mv3BG: new Set(['scripts', 'page'])
+        },
+        mv2Only: new Set(['browser_action', 'page_action']),
+        order: [
+            // platform-required
+            'manifest_version', 'name', 'version',
+            // CWS-required
+            'description', 'icons',
+            // optional
+            'action', 'author', 'background', 'browser_specific_settings', 'chrome_settings_overrides',
+            'chrome_url_overrides', 'commands', 'content_scripts', 'content_security_policy',
+            'cross_origin_embedder_policy', 'cross_origin_opener_policy', 'dark_theme', 'declarative_net_request',
+            'default_locale', 'developer', 'devtools_page', 'dictionaries', 'export', 'externally_connectable',
+            'homepage_url', 'host_permissions', 'import', 'incognito', 'key', 'mime_types_handler',
+            'minimum_chrome_version', 'oauth2', 'omnibox', 'optional_host_permissions', 'optional_permissions',
+            'options_page', 'options_ui', 'permissions', 'protocol_handlers', 'requirements', 'sandbox',
+            'short_name', 'sidebar_action', 'side_panel', 'storage', 'theme', 'theme_experiment', 'tts_engine',
+            'update_url', 'version_name', 'web_accessible_resources'
+        ]
+    },
+    paths: {
+        match: new Set([
+            'content_scripts.matches', 'externally_connectable.matches', 'host_permissions',
+            'optional_host_permissions', 'web_accessible_resources.matches'
+        ]),
+        url: new Set([
+            'homepage_url', 'update_url', 'oauth2.scopes',
+            'chrome_settings_overrides.homepage',
+            'chrome_settings_overrides.search_provider.alternate_urls',
+            'chrome_settings_overrides.search_provider.favicon_url',
+            'chrome_settings_overrides.search_provider.image_url',
+            'chrome_settings_overrides.search_provider.instant_url',
+            'chrome_settings_overrides.search_provider.search_url',
+            'chrome_settings_overrides.search_provider.suggest_url',
+            'chrome_settings_overrides.startup_pages'
+        ])
+    },
+    patterns: {
+        remoteCode: [
+            'eval', 'new-function', 'string-timer', 'dynamic-import', 'remote-script-src', 'execute-script-url']
+    }
+}

package/src/data/permissions.js

@@ -1,31 +1,31 @@
-const re = { url: /^https?:\/\// }
+import regex from './regex.js'
 
-export const sensitivePermissions = new Set([
-    'accessibilityFeatures.modify', 'accessibilityFeatures.read', 'bookmarks', 'browsingData', 'clipboardRead',
-    'contentSettings', 'cookies', 'debugger', 'declarativeNetRequest', 'downloads', 'downloads.open', 'downloads.ui',
-    'geolocation', 'history', 'management', 'nativeMessaging', 'pageCapture', 'privacy', 'proxy', 'readingList',
-    'sessions', 'system.storage', 'tabCapture', 'tabGroups', 'tabs', 'topSites', 'ttsEngine',
-    'webAuthenticationProxy', 'webNavigation', 'webRequest', 'webRequestBlocking'
-])
-
-export const validPermissions = new Set([
-    'accessibilityFeatures.modify', 'accessibilityFeatures.read', 'activeTab', 'alarms', 'audio', 'background',
-    'bookmarks', 'browsingData', 'certificateProvider', 'clipboardRead', 'clipboardWrite', 'contentSettings',
-    'contextMenus', 'cookies', 'debugger', 'declarativeContent', 'declarativeNetRequest',
-    'declarativeNetRequestFeedback', 'declarativeNetRequestWithHostAccess', 'desktopCapture', 'dns', 'documentScan',
-    'downloads', 'downloads.open', 'downloads.ui', 'enterprise.deviceAttributes', 'enterprise.hardwarePlatform',
-    'enterprise.networkingAttributes', 'enterprise.platformKeys', 'favicon', 'fileBrowserHandler',
-    'fileSystemProvider', 'fontSettings', 'gcm', 'geolocation', 'history', 'identity', 'identity.email', 'idle',
-    'loginState', 'management', 'menus', 'nativeMessaging', 'notifications', 'offscreen', 'pageCapture', 'platformKeys',
-    'power', 'printerProvider', 'printing', 'printingMetrics', 'privacy', 'processes', 'proxy', 'publicSuffix',
-    'readingList', 'runtime', 'scripting', 'search', 'sessions', 'sidePanel', 'storage', 'system.cpu',
-    'system.display', 'system.memory', 'system.storage', 'tabCapture', 'tabGroups', 'tabs', 'topSites', 'tts',
-    'ttsEngine', 'unlimitedStorage', 'userScripts', 'vpnProvider', 'wallpaper', 'webAuthenticationProxy',
-    'webNavigation', 'webRequest', 'webRequestBlocking'
-])
-
-export function isValidPermission(name, target = 'mv3') {
-    if (validPermissions.has(name)) return true
-    if (target == 'mv3') return false
-    return re.url.test(name) || name.startsWith('<') || name == '*://*/*'
+export default {
+    sensitive: new Set([
+        'accessibilityFeatures.modify', 'accessibilityFeatures.read', 'bookmarks', 'browsingData', 'clipboardRead',
+        'contentSettings', 'cookies', 'debugger', 'declarativeNetRequest', 'downloads', 'downloads.open',
+        'downloads.ui', 'geolocation', 'history', 'management', 'nativeMessaging', 'pageCapture', 'privacy',
+        'proxy', 'readingList', 'sessions', 'system.storage', 'tabCapture', 'tabGroups', 'tabs', 'topSites',
+        'ttsEngine', 'webAuthenticationProxy', 'webNavigation', 'webRequest', 'webRequestBlocking'
+    ]),
+    valid: new Set([
+        'accessibilityFeatures.modify', 'accessibilityFeatures.read', 'activeTab', 'alarms', 'audio', 'background',
+        'bookmarks', 'browsingData', 'certificateProvider', 'clipboardRead', 'clipboardWrite', 'contentSettings',
+        'contextMenus', 'cookies', 'debugger', 'declarativeContent', 'declarativeNetRequest',
+        'declarativeNetRequestFeedback', 'declarativeNetRequestWithHostAccess', 'desktopCapture', 'dns',
+        'documentScan', 'downloads', 'downloads.open', 'downloads.ui', 'enterprise.deviceAttributes',
+        'enterprise.hardwarePlatform', 'enterprise.networkingAttributes', 'enterprise.platformKeys', 'favicon',
+        'fileBrowserHandler', 'fileSystemProvider', 'fontSettings', 'gcm', 'geolocation', 'history', 'identity',
+        'identity.email', 'idle', 'loginState', 'management', 'menus', 'nativeMessaging', 'notifications',
+        'offscreen', 'pageCapture', 'platformKeys', 'power', 'printerProvider', 'printing', 'printingMetrics',
+        'privacy', 'processes', 'proxy', 'publicSuffix', 'readingList', 'runtime', 'scripting', 'search',
+        'sessions', 'sidePanel', 'storage', 'system.cpu', 'system.display', 'system.memory', 'system.storage',
+        'tabCapture', 'tabGroups', 'tabs', 'topSites', 'tts', 'ttsEngine', 'unlimitedStorage', 'userScripts',
+        'vpnProvider', 'wallpaper', 'webAuthenticationProxy', 'webNavigation', 'webRequest', 'webRequestBlocking'
+    ]),
+    isValid(name, target = 'mv3') {
+        if (this.valid.has(name)) return true
+        if (target == 'mv3') return false
+        return regex.url.test(name) || name.startsWith('<') || name == '*://*/*'
+    }
 }

package/src/data/regex.js

@@ -0,0 +1,10 @@
+export default {
+    filename: {
+        cssHTML: /\.(css|htm|html)$/i,
+        license: // eslint-disable-next-line security/detect-unsafe-regex
+            /^(?:[\w.-]*-)?(?:LICEN[SC]E|COPYING)(?:[-.][\w.-]+)?$/i,
+        manifest: /manifest\.json$/,
+        script: /\.[cm]?[jt]sx?$/i
+    },
+    url: /^https?:\/\//
+}

package/src/index.js

@@ -1,128 +1,12 @@
-import { bundles as oldBundles } from './data/deprecations.js'
+import deprecations from './data/deprecations.js'
+import init from './utils/init.js'
 
-import css from '@eslint/css'
-import html from '@html-eslint/eslint-plugin'
-import json from '@eslint/json'
+const plugin = init.plugin()
 
-import manifestKeyOrder from './rules/manifest-key-order.js'
-import manifestSpacing from './rules/manifest-spacing.js'
-import noContentStyleLeak from './rules/no-content-style-leak.js'
-import noDeprecatedAPIs from './rules/no-deprecated-apis.js'
-import noDuplicateManifestKeys from './rules/no-duplicate-manifest-keys.js'
-import noInsecureFetch from './rules/no-insecure-fetch.js'
-import noInsecureMessaging from './rules/no-insecure-messaging.js'
-import noInvalidPermissions from './rules/no-invalid-permissions.js'
-import noMissingDefaultLocale from './rules/no-missing-default-locale.js'
-import noMissingI18nKeys from './rules/no-missing-i18n-keys.js'
-import noMissingPermissions from './rules/no-missing-permissions.js'
-import noMissingWebAccessibleResources from './rules/no-missing-web-accessible-resources.js'
-import noRemoteCode from './rules/no-remote-code.js'
-import noUnrestrictedHostPermissions from './rules/no-unrestricted-host-permissions.js'
-import noUnusedI18nKeys from './rules/no-unused-i18n-keys.js'
-import noUnusedPermissions from './rules/no-unused-permissions.js'
-import requireLicenseFile from './rules/require-license-file.js'
-import requireMV3 from './rules/require-mv3.js'
-import requireShortNameWhenUseful from './rules/require-short-name-when-useful.js'
-import validFilenames from './rules/valid-filenames.js'
-import validLicenseFile from './rules/valid-license-file.js'
-import validManifestIcons from './rules/valid-manifest-icons.js'
-import validMV3schema from './rules/valid-mv3-schema.js'
-import validServiceWorker from './rules/valid-service-worker.js'
-import validURLfields from './rules/valid-url-fields.js'
-import validVersionField from './rules/valid-version-field.js'
+init.rules(plugin)
+init.configs(plugin)
 
-import { bundleRules, initBundleDeprecation } from './utils.js'
-import { textParser } from './data/text-parser.js'
-
-const plugin = {
-    rules: {
-        'manifest-key-order': manifestKeyOrder,
-        'manifest-spacing': manifestSpacing,
-        'no-content-style-leak': noContentStyleLeak,
-        'no-deprecated-apis': noDeprecatedAPIs,
-        'no-duplicate-manifest-keys': noDuplicateManifestKeys,
-        'no-insecure-fetch': noInsecureFetch,
-        'no-insecure-messaging': noInsecureMessaging,
-        'no-invalid-permissions': noInvalidPermissions,
-        'no-missing-default-locale': noMissingDefaultLocale,
-        'no-missing-i18n-keys': noMissingI18nKeys,
-        'no-missing-permissions': noMissingPermissions,
-        'no-missing-web-accessible-resources': noMissingWebAccessibleResources,
-        'no-remote-code': noRemoteCode,
-        'no-unrestricted-host-permissions': noUnrestrictedHostPermissions,
-        'no-unused-i18n-keys': noUnusedI18nKeys,
-        'no-unused-permissions': noUnusedPermissions,
-        'require-mv3': requireMV3,
-        'require-license-file': requireLicenseFile,
-        'require-short-name-when-useful': requireShortNameWhenUseful,
-        'valid-filenames': validFilenames,
-        'valid-license-file': validLicenseFile,
-        'valid-manifest-icons': validManifestIcons,
-        'valid-mv3-schema': validMV3schema,
-        'valid-service-worker': validServiceWorker,
-        'valid-url-fields': validURLfields,
-        'valid-version-field': validVersionField
-    }
-}
-
-for (const [ruleId, rule] of Object.entries(plugin.rules))
-    rule.meta.docs.url = `https://codeberg.org/adamlui/eslint-plugin-chrome-extensions/#${ruleId}`
-
-plugin.configs = {
-    recommended: {
-        plugins: { 'chrome-extensions': plugin },
-        rules: bundleRules(plugin.rules, rule => rule.meta.docs.recommended, 'chrome-extensions')
-    },
-    strict: {
-        plugins: { 'chrome-extensions': plugin },
-        rules: bundleRules(plugin.rules, () => true, 'chrome-extensions')
-    },
-    problem: {
-        plugins: { 'chrome-extensions': plugin },
-        rules: bundleRules(plugin.rules, rule => rule.meta.type == 'problem', 'chrome-extensions')
-    },
-    security: {
-        plugins: { 'chrome-extensions': plugin },
-        rules: bundleRules(plugin.rules, rule => rule.meta.docs.security, 'chrome-extensions')
-    },
-    manifest: {
-        language: 'json/json',
-        plugins: { 'chrome-extensions': plugin, json },
-        rules: bundleRules(plugin.rules, rule => rule.meta.docs.manifest, 'chrome-extensions')
-    },
-    license: {
-        languageOptions: { parser: textParser },
-        plugins: { 'chrome-extensions': plugin },
-        rules: bundleRules(plugin.rules, rule => rule.meta.docs.license, 'chrome-extensions')
-    },
-    css: {
-        language: 'css/css',
-        plugins: { 'chrome-extensions': plugin, css },
-        rules: bundleRules(plugin.rules, rule => rule.meta.docs.css, 'chrome-extensions')
-    },
-    html: {
-        language: 'html/html',
-        plugins: { 'chrome-extensions': plugin, html },
-        rules: bundleRules(plugin.rules, rule => rule.meta.docs.html, 'chrome-extensions')
-    },
-    json: {
-        language: 'json/json',
-        plugins: { 'chrome-extensions': plugin, json },
-        rules: bundleRules(plugin.rules, rule => rule.meta.docs.json, 'chrome-extensions')
-    },
-    json5: {
-        language: 'json/json5',
-        plugins: { 'chrome-extensions': plugin, json },
-        rules: bundleRules(plugin.rules, rule => rule.meta.docs.json, 'chrome-extensions')
-    },
-    jsonc: {
-        language: 'json/jsonc',
-        plugins: { 'chrome-extensions': plugin, json },
-        rules: bundleRules(plugin.rules, rule => rule.meta.docs.json, 'chrome-extensions')
-    }
-}
-
-for (const entry of Object.entries(oldBundles))
-    initBundleDeprecation(plugin, entry, 'chrome-extensions')
+for (const entry of Object.entries(deprecations.bundles))
+    init.bundleDeprecation(plugin, entry, 'chrome-extensions')
 
 export { plugin as default, plugin as chromeExtensions }

package/src/rules/manifest-key-order.js

@@ -1,7 +1,7 @@
-import { manifestKeyOrder } from '../data/manifest.js'
-import { getFilename } from '../utils.js'
+import extension from '../utils/extension.js'
 
-const re = { manifestFilename: /manifest\.json$/ }
+import manifest from '../data/manifest.js'
+import regex from '../data/regex.js'
 
 function keyOf(member) {
     const keyNode = member.name || member.key
@@ -43,15 +43,15 @@ export default {
     },
 
     create(context) {
-        if (!re.manifestFilename.test(getFilename(context))) return {}
+        if (!regex.filename.manifest.test(extension.file.getName(context))) return {}
         const custom = context.options[0]?.order ?? [],
-              master = custom.length ? manifestKeyOrder.filter(key => !custom.includes(key))
-                     : manifestKeyOrder
+              master = custom.length ? manifest.keys.order.filter(key => !custom.includes(key))
+                     : manifest.keys.order
         return {
             'Document:exit'(document) {
                 const root = document.body ; if (root?.type != 'Object') return
-                const members = root.members || root.properties || []
-                const violation = findViolation(members, master) ?? (custom.length && findViolation(members, custom))
+                const members = root.members || root.properties || [],
+                      violation = findViolation(members, master) ?? (custom.length && findViolation(members, custom))
                 if (!violation) return
                 const [first, second] = violation
                 context.report({

package/src/rules/manifest-spacing.js

@@ -1,6 +1,7 @@
-import { getFilename } from '../utils.js'
+import extension from '../utils/extension.js'
+import regex from '../data/regex.js'
 
-const re = { manifestFilename: /manifest\.json$/, leadingWhitespace: /^[ \t]+/ },
+const re = { leadingWhitespace: /^[ \t]+/ },
       brackets = { open: new Set(['LBrace', 'LBracket']), close: new Set(['RBrace', 'RBracket']) }
 
 export default {
@@ -39,8 +40,7 @@ export default {
             },
             additionalProperties: false
         }],
-        defaultOptions: [{ spaces: 2, checkColons: true, checkCommas: true,
-                           checkBraces: true, checkBrackets: true }],
+        defaultOptions: [{ spaces: 2, checkColons: true, checkCommas: true, checkBraces: true, checkBrackets: true }],
         messages: {
             wrongIndent: 'Expected {{expected}} spaces of indentation (found {{found}}).',
             tabFound: 'Expected spaces for indentation, found tabs.',
@@ -57,7 +57,7 @@ export default {
     },
 
     create(context) {
-        if (!re.manifestFilename.test(getFilename(context))) return {}
+        if (!regex.filename.manifest.test(extension.file.getName(context))) return {}
         const opts = context.options[0] || {},
               spaces = opts.spaces ?? 2,
               checkColons = opts.checkColons ?? true,

package/src/rules/no-content-style-leak.js

@@ -1,4 +1,4 @@
-import { readManifest, isContentScriptFile } from '../utils.js'
+import extension from '../utils/extension.js'
 
 const re = { appendMethod: /^append(?:Child)?$/ }
 
@@ -17,7 +17,8 @@ export default {
     },
 
     create(context) {
-        const manifest = readManifest(context) ; if (!manifest || !isContentScriptFile(context, manifest)) return {}
+        const manifest = extension.manifest.read(context)
+        if (!manifest || !extension.file.isContentScript(context, manifest)) return {}
         const styleElems = new Set(), docAliases = new Set()
         function isCreateStyle(node) {
             return node?.type == 'CallExpression'
@@ -57,8 +58,9 @@ export default {
             CallExpression(node) {
                 if (node.callee.type != 'MemberExpression') return
                 const method = node.callee.property.name
-                if (!re.appendMethod.test(method)) return
-                if (!isDocumentMember(node.callee.object)) return
+                if (!re.appendMethod.test(method)
+                    || !isDocumentMember(node.callee.object)
+                ) return
                 for (const arg of node.arguments)
                     if (isStyleTarget(arg))
                         context.report({ node: arg, messageId: 'styleLeak' })

package/src/rules/no-deprecated-apis.js

@@ -1,5 +1,5 @@
-import { findDeprecated } from '../data/apis.js'
-import { getMemberPath } from '../utils.js'
+import nodeUtils from '../utils/node.js'
+import apis from '../data/apis.js'
 
 export default {
     meta: {
@@ -50,8 +50,8 @@ export default {
         return {
             MemberExpression(node) {
                 if (node.parent.type == 'MemberExpression' && node.parent.object === node) return
-                const api = getMemberPath(node) ; if (!api?.startsWith('chrome.') || isAllowed(api)) return
-                const found = findDeprecated(api) ; if (!found) return
+                const api = nodeUtils.getMemberPath(node) ; if (!api?.startsWith('chrome.') || isAllowed(api)) return
+                const found = apis.findDeprecated(api) ; if (!found) return
                 context.report({ node, messageId: 'deprecatedAPI',
                     data: { api: found.deprecated, replacement: found.replacement, target }})
             }

package/src/rules/no-duplicate-manifest-keys.js

@@ -1,6 +1,5 @@
-import { getFilename } from '../utils.js'
-
-const re = { manifestFilename: /manifest\.json$/ }
+import extension from '../utils/extension.js'
+import regex from '../data/regex.js'
 
 export default {
     meta: {
@@ -18,7 +17,7 @@ export default {
     },
 
     create(context) {
-        if (!re.manifestFilename.test(getFilename(context))) return {}
+        if (!regex.filename.manifest.test(extension.file.getName(context))) return {}
         return {
             Object(node) {
                 const members = node.members || node.properties || [],

package/src/rules/no-insecure-messaging.js

@@ -1,5 +1,5 @@
-import { getMemberPath } from '../utils.js'
-import { isExternalMessagingListener } from '../data/apis.js'
+import nodeUtils from '../utils/node.js'
+import apis from '../data/apis.js'
 
 const re = { postmsgValidation: /\b\w+\.(?:origin|source)\b/, senderValidation: /sender\.(?:id|origin)/ }
 
@@ -44,9 +44,9 @@ export default {
         return {
             CallExpression(node) {
                 if (node.callee.type != 'MemberExpression') return
-                const path = getMemberPath(node.callee) ; if (!path) return
+                const path = nodeUtils.getMemberPath(node.callee) ; if (!path) return
                 const listenerRoot = path.endsWith('.addListener') ? path.slice(0, -'.addListener'.length) : null
-                if (listenerRoot && isExternalMessagingListener(listenerRoot)) {
+                if (listenerRoot && apis.isExternalMsgListener(listenerRoot)) {
                     const handler = node.arguments[0] ; if (!handler) return
                     const body = context.sourceCode.getText(handler)
                     if (!re.senderValidation.test(body))

package/src/rules/no-invalid-permissions.js

@@ -1,7 +1,7 @@
-import { getFilename, readManifest } from '../utils.js'
-import { isValidPermission } from '../data/permissions.js'
+import extension from '../utils/extension.js'
 
-const re = { manifestFilename: /manifest\.json$/ }
+import permissions from '../data/permissions.js'
+import regex from '../data/regex.js'
 
 export default {
     meta: {
@@ -46,29 +46,28 @@ export default {
                       : opts.allowedPermissions ? [opts.allowedPermissions] : [])
         function checkPermission(node, permission) {
             if (typeof permission != 'string') return
-            if (allowed.has(permission) || isValidPermission(permission, target)) return
+            if (allowed.has(permission) || permissions.isValid(permission, target)) return
             context.report({ node, messageId: 'invalidPermission', data: { permission, target }})
         }
-        if (re.manifestFilename.test(getFilename(context))) // lint it directly
+        if (regex.filename.manifest.test(extension.file.getName(context))) // lint it directly
             return {
                 '*'(node) {
                     const keyNode = node.name || node.key ; if (!keyNode) return
-                    const keyName = keyNode.value ?? keyNode.name
-                    if (keyName != 'permissions' && keyName != 'optional_permissions') return
+                    if (!['optional_permissions', 'permissions'].includes(keyNode.value ?? keyNode.name)) return
                     const arrNode = node.value ; if (arrNode?.type != 'Array') return
-                    const elems = arrNode.elements || arrNode.items || []
-                    for (const elem of elems) {
+                    const nodeElems = arrNode.elements || arrNode.items || []
+                    for (const elem of nodeElems) {
                         const valueNode = elem.value || elem
                         checkPermission(valueNode, valueNode?.value)
                     }
                 }
             }
-        const manifest = readManifest(context) ; if (!manifest) return {}
+        const manifest = extension.manifest.read(context) ; if (!manifest) return {}
         const allPermissions = [...(manifest.permissions || []), ...(manifest.optional_permissions || [])]
         return {
             'Program:exit'() {
                 for (const permission of allPermissions) {
-                    if (allowed.has(permission) || isValidPermission(permission, target)) continue
+                    if (allowed.has(permission) || permissions.isValid(permission, target)) continue
                     context.report({ loc: { line: 1, column: 0 },
                         messageId: 'invalidPermission', data: { permission, target }})
                 }