eslint-plugin-chrome-extensions 2.8.1 → 2.9.1

package/README.md

@@ -7,7 +7,7 @@
 <a href="https://codeberg.org/adamlui/eslint-plugin-chrome-extensions/src/branch/main/docs/LICENSE.md">
     <img alt="[License: MIT]" src="https://img.shields.io/badge/License-MIT-f1f20a.svg?logo=internetarchive&logoColor=white&labelColor=464646&style=for-the-badge"></a>
 <a target="_blank" href="https://getnpmstats.com/?package=eslint-plugin-chrome-extensions&range=last-year&interval=monthly">
-    <img src="https://img.shields.io/npm/dm/eslint-plugin-chrome-extensions?style=for-the-badge&logo=npm&color=black"></a>
+    <img alt="[Monthly npm downloads]" src="https://img.shields.io/npm/dm/eslint-plugin-chrome-extensions?style=for-the-badge&logo=npm&color=black"></a>
 <a href="#usage">
     <img alt="[Supports ESLint >=9.6.0 / Oxlint >=1.65.0]" src="https://img.shields.io/badge/Supports-ESLint_%3E%3D9.6.0_%2F_Oxlint_%3E%3D1.65.0-4B32C3?style=for-the-badge&logo=eslint"></a>
 <br><br>
@@ -44,9 +44,8 @@ import chromeExtensions from 'eslint-plugin-chrome-extensions'
 export default [
     // other configs
     {
-        files: ['**/extension/**/*.{cjs,js,jsx,mjs,ts,tsx}'],
-        plugins: { 'chrome-extensions': chromeExtensions },
-        rules: {
+        files: ['**/extension/**/*.{cjs,cts,js,jsx,mjs,mts,ts,tsx}'], ...chromeExtensions.configs.recommended,
+        rules: {  // include this block if customizing rules
             ...chromeExtensions.configs.recommended.rules,
             'chrome-extensions/no-deprecated-apis': 'off',  // selectively disable rule
             'chrome-extensions/valid-version-field': ['error', { versionType: 'date' }]  // selectively tweak rule
@@ -68,7 +67,7 @@ export default [
 
 ### <img height=15 width=auto src="https://www.google.com/s2/favicons?domain=oxc.rs&sz=64"> Oxlint
 
-Add a JS bundle to your `oxlint.config.ts` (non-JS parsing is unsupported by Oxlint):
+Add a JS/TS bundle to your `oxlint.config.*ts` (non-JS/TS parsing is unsupported by Oxlint):
 
 ```ts
 ...
@@ -78,7 +77,7 @@ export default defineConfig({
     overrides: [
         // other configs
         {
-            files: ['**/extension/**/*.{cjs,js,jsx,mjs,ts,tsx}'],
+            files: ['**/extension/**/*.{cjs,cts,js,jsx,mjs,mts,ts,tsx}'],
             jsPlugins: ['eslint-plugin-chrome-extensions'],
             rules: {
                 ...chromeExtensions.configs.recommended.rules,
@@ -96,7 +95,7 @@ export default defineConfig({
 
 ---
 
-*Available JS bundles:* `recommended`, `strict` (everything), `problem` (deterministic bugs only), `security`
+*Available JS/TS bundles:* `recommended`, `strict` (everything), `problem` (deterministic bugs only), `security`
 
 *Available filetype bundles (ESLint only):* `manifest`, `license`, `css`, `html`, `json`, `json5`, `jsonc`
 
@@ -595,10 +594,78 @@ If your CSS is scoped inside a Shadow DOM root.
 
 </details>
 
+<h3 id="no-host-page-selectors">
+    <code>no-host-page-selectors</code>
+    <a title="Only works in 'css/css' config block" href="#usage">
+        <img height=18 alt="[CSS only]" src="https://img.shields.io/badge/CSS_only-dcd6f7?style=flat-square" align="middle"></a>
+    <a title="Accepts array w/ options" href="#usage">
+        <img height=18 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
+    <a title="Copy rule URL" target="_blank"
+       href="https://copy-to-clipboard.onrender.com/copy/https%3A%2F%2Fcodeberg.org%2Fadamlui%2Feslint-plugin-chrome-extensions%2F%23no-host-page-selectors">
+        <img height=16 width=21 alt="[Copy rule URL]" src="https://api.iconify.design/mdi/content-copy.svg?color=%23cccccc" align="middle"></a>
+</h3>
+
+<details>
+
+<summary>Disallows host-page selectors (<code>html</code>, <code>body</code>, <code>:root</code>, <code>*</code>, bare elem types) in content-script CSS.</summary>
+
+<h4 id="no-host-page-selectors-options">Options</h4>
+
+- `allowedSelectors` (default `[]`) – selectors to explicitly allow (e.g. `['body.dark']`), as a single string or array <a title="Introduced in v2.7.0" target="_blank" href="https://codeberg.org/adamlui/eslint-plugin-chrome-extensions/releases/tag/v2.7.0"><img height=14 alt="[Since v2.7.0]" src="https://img.shields.io/badge/since-v2.7.0-8a9199?style=flat-square" align="middle"></a>
+- `disallowUniversal` (default `true`) – flag `*` <a title="Introduced in v2.7.0" target="_blank" href="https://codeberg.org/adamlui/eslint-plugin-chrome-extensions/releases/tag/v2.7.0"><img height=14 alt="[Since v2.7.0]" src="https://img.shields.io/badge/since-v2.7.0-8a9199?style=flat-square" align="middle"></a>
+- `disallowStructural` (default `true`) – flag `html`, `body`, `:root` <a title="Introduced in v2.7.0" target="_blank" href="https://codeberg.org/adamlui/eslint-plugin-chrome-extensions/releases/tag/v2.7.0"><img height=14 alt="[Since v2.7.0]" src="https://img.shields.io/badge/since-v2.7.0-8a9199?style=flat-square" align="middle"></a>
+- `disallowBareElements` (default `true`) – flag elem types (e.g. `div`, `a`) that lack `class`/`id`/`attribute` <a title="Introduced in v2.7.0" target="_blank" href="https://codeberg.org/adamlui/eslint-plugin-chrome-extensions/releases/tag/v2.7.0"><img height=14 alt="[Since v2.7.0]" src="https://img.shields.io/badge/since-v2.7.0-8a9199?style=flat-square" align="middle"></a>
+
+#### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/gray.svg" align="bottom"> Incorrect code
+
+```diff
+! * { box-sizing: border-box }
+
+! body { margin: 0 }
+! html { font-family: sans-serif }
+! button:hover { opacity: 0.8 }
+```
+
+#### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/green.svg" align="bottom"> Correct code
+
+```diff
+- * { box-sizing: border-box }
++ :host { box-sizing: border-box }
+
+- body { margin: 0 }
++ :host { margin: 0 }
+- html { font-family: sans-serif }
++ :host { font-family: sans-serif }
+- button:hover { opacity: 0.8 }
++ .myext-button:hover { opacity: 0.8 }
+```
+
+#### When not to use it
+
+If you intentionally style the host page. For individual selectors you still need, prefer `allowedSelectors` over disabling the rule.
+
+#### Introduced in
+
+<a target="_blank" href="https://codeberg.org/adamlui/eslint-plugin-chrome-extensions/releases/tag/v2.7.0">v2.7.0</a> (October 17, 2026)
+
+#### See also
+
+- [`no-content-style-leak`](#no-content-style-leak)
+    <a title="Only included in strict config" href="#usage"><img height=14 alt="[Strict only]" src="https://img.shields.io/badge/Strict_only-ff8c42?style=flat-square" align="middle"></a>
+- <img height=12 src="https://www.google.com/s2/favicons?domain=developer.mozilla.org&sz=64">&ensp;<a target="_blank" href="https://developer.mozilla.org/en-US/docs/Web/CSS/:host">MDN — `:host`</a>
+
+<div align="center">
+
+[Back to index ↑][epce-rules]
+
+</div>
+
+---
+
+</details>
+
 <h3 id="no-inline-event-handlers">
     <code>no-inline-event-handlers</code>
-    <a title="Introduced in latest minor release" target="_blank" href="https://codeberg.org/adamlui/eslint-plugin-chrome-extensions/releases/tag/v2.8.0">
-        <img height=16 align="middle" src="https://api.iconify.design/mdi/sprout.svg?color=%234a4a4a"></a>
     <a title="Only works in 'html/html' config block" href="#usage">
         <img height=18 alt="[HTML only]" src="https://img.shields.io/badge/HTML_only-a8d8ea?style=flat-square" align="middle"></a>
     <a title="Accepts array w/ options" href="#usage">
@@ -673,8 +740,6 @@ If your HTML is a <a target="_blank" href="https://developer.chrome.com/docs/ext
 
 <h3 id="no-inline-scripts">
     <code>no-inline-scripts</code>
-    <a title="Introduced in latest minor release" target="_blank" href="https://codeberg.org/adamlui/eslint-plugin-chrome-extensions/releases/tag/v2.8.0">
-        <img height=16 align="middle" src="https://api.iconify.design/mdi/sprout.svg?color=%234a4a4a"></a>
     <a title="Only works in 'html/html' config block" href="#usage">
         <img height=18 alt="[HTML only]" src="https://img.shields.io/badge/HTML_only-a8d8ea?style=flat-square" align="middle"></a>
     <a title="Accepts array w/ options" href="#usage">
@@ -742,76 +807,6 @@ If your HTML is a <a target="_blank" href="https://developer.chrome.com/docs/ext
 
 </details>
 
-<h3 id="no-host-page-selectors">
-    <code>no-host-page-selectors</code>
-    <a title="Only works in 'css/css' config block" href="#usage">
-        <img height=18 alt="[CSS only]" src="https://img.shields.io/badge/CSS_only-dcd6f7?style=flat-square" align="middle"></a>
-    <a title="Accepts array w/ options" href="#usage">
-        <img height=18 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
-    <a title="Copy rule URL" target="_blank"
-       href="https://copy-to-clipboard.onrender.com/copy/https%3A%2F%2Fcodeberg.org%2Fadamlui%2Feslint-plugin-chrome-extensions%2F%23no-host-page-selectors">
-        <img height=16 width=21 alt="[Copy rule URL]" src="https://api.iconify.design/mdi/content-copy.svg?color=%23cccccc" align="middle"></a>
-</h3>
-
-<details>
-
-<summary>Disallows host-page selectors (<code>html</code>, <code>body</code>, <code>:root</code>, <code>*</code>, bare elem types) in content-script CSS.</summary>
-
-<h4 id="no-host-page-selectors-options">Options</h4>
-
-- `allowedSelectors` (default `[]`) – selectors to explicitly allow (e.g. `['body.dark']`), as a single string or array <a title="Introduced in v2.7.0" target="_blank" href="https://codeberg.org/adamlui/eslint-plugin-chrome-extensions/releases/tag/v2.7.0"><img height=14 alt="[Since v2.7.0]" src="https://img.shields.io/badge/since-v2.7.0-8a9199?style=flat-square" align="middle"></a>
-- `disallowUniversal` (default `true`) – flag `*` <a title="Introduced in v2.7.0" target="_blank" href="https://codeberg.org/adamlui/eslint-plugin-chrome-extensions/releases/tag/v2.7.0"><img height=14 alt="[Since v2.7.0]" src="https://img.shields.io/badge/since-v2.7.0-8a9199?style=flat-square" align="middle"></a>
-- `disallowStructural` (default `true`) – flag `html`, `body`, `:root` <a title="Introduced in v2.7.0" target="_blank" href="https://codeberg.org/adamlui/eslint-plugin-chrome-extensions/releases/tag/v2.7.0"><img height=14 alt="[Since v2.7.0]" src="https://img.shields.io/badge/since-v2.7.0-8a9199?style=flat-square" align="middle"></a>
-- `disallowBareElements` (default `true`) – flag elem types (e.g. `div`, `a`) that lack `class`/`id`/`attribute` <a title="Introduced in v2.7.0" target="_blank" href="https://codeberg.org/adamlui/eslint-plugin-chrome-extensions/releases/tag/v2.7.0"><img height=14 alt="[Since v2.7.0]" src="https://img.shields.io/badge/since-v2.7.0-8a9199?style=flat-square" align="middle"></a>
-
-#### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/gray.svg" align="bottom"> Incorrect code
-
-```diff
-! * { box-sizing: border-box }
-
-! body { margin: 0 }
-! html { font-family: sans-serif }
-! button:hover { opacity: 0.8 }
-```
-
-#### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/green.svg" align="bottom"> Correct code
-
-```diff
-- * { box-sizing: border-box }
-+ :host { box-sizing: border-box }
-
-- body { margin: 0 }
-+ :host { margin: 0 }
-- html { font-family: sans-serif }
-+ :host { font-family: sans-serif }
-- button:hover { opacity: 0.8 }
-+ .myext-button:hover { opacity: 0.8 }
-```
-
-#### When not to use it
-
-If you intentionally style the host page. For individual selectors you still need, prefer `allowedSelectors` over disabling the rule.
-
-#### Introduced in
-
-<a target="_blank" href="https://codeberg.org/adamlui/eslint-plugin-chrome-extensions/releases/tag/v2.7.0">v2.7.0</a> (October 17, 2026)
-
-#### See also
-
-- [`no-content-style-leak`](#no-content-style-leak)
-    <a title="Only included in strict config" href="#usage"><img height=14 alt="[Strict only]" src="https://img.shields.io/badge/Strict_only-ff8c42?style=flat-square" align="middle"></a>
-- <img height=12 src="https://www.google.com/s2/favicons?domain=developer.mozilla.org&sz=64">&ensp;<a target="_blank" href="https://developer.mozilla.org/en-US/docs/Web/CSS/:host">MDN — `:host`</a>
-
-<div align="center">
-
-[Back to index ↑][epce-rules]
-
-</div>
-
----
-
-</details>
-
 <h3 id="no-insecure-fetch">
     <code>no-insecure-fetch</code>
     <a title="Included in recommended config" href="#usage">
@@ -1481,8 +1476,6 @@ If you intentionally target forks w/ relaxed CSPs. For individual patterns you s
 
 <h3 id="no-remote-objects">
     <code>no-remote-objects</code>
-    <a title="Introduced in latest minor release" target="_blank" href="https://codeberg.org/adamlui/eslint-plugin-chrome-extensions/releases/tag/v2.8.0">
-        <img height=16 align="middle" src="https://api.iconify.design/mdi/sprout.svg?color=%234a4a4a"></a>
     <a title="Only works in 'html/html' config block" href="#usage">
         <img height=18 alt="[HTML only]" src="https://img.shields.io/badge/HTML_only-a8d8ea?style=flat-square" align="middle"></a>
     <a title="Accepts array w/ options" href="#usage">

package/docs/LICENSE.md

@@ -1,6 +1,6 @@
 # MIT License
 
-**Copyright © 2026 [Adam Lui](https://codeberg.org/adamlui)**
+**Copyright © 2026 [Adam Lui](https://codeberg.org/adamlui).**
 
 Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eslint-plugin-chrome-extensions",
-  "version": "2.8.1",
+  "version": "2.9.1",
   "description": "ESLint rules for Chrome extensions",
   "keywords": [
     "eslint",
@@ -72,25 +72,29 @@
     "@eslint/markdown": "^7.5.1",
     "@html-eslint/eslint-plugin": "^0.67.0",
     "@stylistic/eslint-plugin": "^5.10.0",
-    "eslint": "^10.13.0",
-    "eslint-plugin-constructors": "^1.5.1",
+    "@typescript-eslint/parser": "^8.72.1",
+    "eslint": "^10.14.0",
+    "eslint-plugin-constructors": "^1.7.0",
     "eslint-plugin-eslint-plugin": "^7.6.2",
     "eslint-plugin-import-x": "^4.17.1",
     "eslint-plugin-n": "^18.5.0",
     "eslint-plugin-no-secrets": "^2.3.3",
     "eslint-plugin-no-unsanitized": "^4.1.5",
-    "eslint-plugin-package-json": "^1.11.0",
+    "eslint-plugin-package-json": "^1.12.0",
     "eslint-plugin-promise": "^7.3.0",
-    "eslint-plugin-regexp": "^3.3.1",
-    "eslint-plugin-security": "^4.2.0",
+    "eslint-plugin-regexp": "^3.3.2",
+    "eslint-plugin-security": "^4.2.1",
     "eslint-plugin-sonarjs": "^4.2.2",
-    "eslint-plugin-woodpecker": "^1.1.1",
-    "oxlint": "^1.89.0"
+    "eslint-plugin-woodpecker": "^1.1.2",
+    "oxlint": "^1.90.0",
+    "typescript": "npm:@typescript/typescript6@^6.0.2",
+    "typescript-latest": "npm:typescript@^7.0.2"
   },
   "peerDependencies": {
-    "@eslint/css": ">=0.5.0",
+    "@eslint/css": ">=0.1.0",
     "@eslint/json": ">=0.1.0",
-    "@html-eslint/eslint-plugin": ">=0.42.0",
+    "@html-eslint/eslint-plugin": ">=0.41.0",
+    "@typescript-eslint/parser": ">=8.0.0",
     "eslint": ">=9.6.0"
   },
   "engines": {

package/src/rules/css-spacing.js

@@ -3,6 +3,11 @@
 import extension from '../utils/extension.js'
 import regex from '../data/regex.js'
 
+const defaultOptions = {
+    spaces: 2, checkBraces: true, checkBrackets: true, checkColons: true, checkCombinators: true, checkCommas: true,
+    checkParentheses: true, checkSemicolons: true
+}
+
 const re = { leadingWhitespace: /^[ \t]+/ },
       combinators = new Set(['>', '+', '~'])
 
@@ -37,10 +42,7 @@ export default {
             },
             additionalProperties: false
         }],
-        defaultOptions: [{
-            spaces: 2, checkBraces: true, checkBrackets: true, checkColons: true,
-            checkCombinators: true, checkCommas: true, checkParentheses: true, checkSemicolons: true
-        }],
+        defaultOptions: [defaultOptions],
         messages: {
             wrongIndent: 'Expected {{expected}} spaces of indentation (found {{found}}).',
             tabFound: 'Expected spaces for indentation, found tabs.',
@@ -63,16 +65,9 @@ export default {
 
     create(context) {
         if (!regex.filename.css.test(extension.file.getName(context))) return {}
-        const opts = context.options[0] || {},
-              spaces = opts.spaces ?? 2,
-              checkBraces = opts.checkBraces ?? true,
-              checkBrackets = opts.checkBrackets ?? true,
-              checkColons = opts.checkColons ?? true,
-              checkCombinators = opts.checkCombinators ?? true,
-              checkCommas = opts.checkCommas ?? true,
-              checkParentheses = opts.checkParentheses ?? true,
-              checkSemicolons = opts.checkSemicolons ?? true,
-              sourceCode = context.sourceCode,
+        const { spaces, checkBraces, checkBrackets, checkColons, checkCombinators, checkCommas, checkParentheses,
+                    checkSemicolons } = { ...defaultOptions, ...context.options[0] }
+        const sourceCode = context.sourceCode,
               text = sourceCode.text,
               lines = text.split('\n'),
               lineOffsets = [0]

package/src/rules/manifest-key-order.js

@@ -3,6 +3,8 @@ import extension from '../utils/extension.js'
 import manifest from '../data/manifest.js'
 import regex from '../data/regex.js'
 
+const defaultOptions = { order: [] }
+
 function keyOf(member) {
     const keyNode = member.name || member.key
     return keyNode?.value ?? keyNode?.name
@@ -37,20 +39,19 @@ export default {
             },
             additionalProperties: false
         }],
-        defaultOptions: [{ order: [] }],
+        defaultOptions: [defaultOptions],
         messages: { wrongOrder: '`{{first}}` should appear before `{{second}}`.' }
     },
 
     create(context) {
         if (!regex.filename.manifest.test(extension.file.getName(context))) return {}
-        const custom = context.options[0]?.order ?? [],
-              master = custom.length ? manifest.keys.order.filter(key => !custom.includes(key))
-                     : manifest.keys.order
+        const { order } = { ...defaultOptions, ...context.options[0] },
+                master = order.length ? manifest.keys.order.filter(key => !order.includes(key)) : manifest.keys.order
         return {
             'Document:exit'(document) {
                 const root = document.body ; if (root?.type != 'Object') return
                 const members = root.members || root.properties || [],
-                      violation = findViolation(members, master) ?? (custom.length && findViolation(members, custom))
+                      violation = findViolation(members, master) ?? (order.length && findViolation(members, order))
                 if (!violation) return
                 const [first, second] = violation
                 context.report({

package/src/rules/manifest-spacing.js

@@ -1,7 +1,8 @@
 import extension from '../utils/extension.js'
 import regex from '../data/regex.js'
 
-const re = { leadingWhitespace: /^[ \t]+/ },
+const defaultOptions = { spaces: 2, checkColons: true, checkCommas: true, checkBraces: true, checkBrackets: true },
+      re = { leadingWhitespace: /^[ \t]+/ },
       brackets = { open: new Set(['LBrace', 'LBracket']), close: new Set(['RBrace', 'RBracket']) }
 
 export default {
@@ -39,7 +40,7 @@ export default {
             },
             additionalProperties: false
         }],
-        defaultOptions: [{ spaces: 2, checkColons: true, checkCommas: true, checkBraces: true, checkBrackets: true }],
+        defaultOptions: [defaultOptions],
         messages: {
             wrongIndent: 'Expected {{expected}} spaces of indentation (found {{found}}).',
             tabFound: 'Expected spaces for indentation, found tabs.',
@@ -57,12 +58,8 @@ export default {
 
     create(context) {
         if (!regex.filename.manifest.test(extension.file.getName(context))) return {}
-        const opts = context.options[0] || {},
-              spaces = opts.spaces ?? 2,
-              checkColons = opts.checkColons ?? true,
-              checkCommas = opts.checkCommas ?? true,
-              checkBraces = opts.checkBraces ?? true,
-              checkBrackets = opts.checkBrackets ?? true
+        const { spaces, checkColons, checkCommas, checkBraces, checkBrackets }
+            = { ...defaultOptions, ...context.options[0] }
         return {
             'Document'(document) {
                 const sourceCode = context.sourceCode,

package/src/rules/no-content-style-leak.js

@@ -1,11 +1,12 @@
 import extension from '../utils/extension.js'
+import nodeUtils from '../utils/node.js'
 
 const re = { appendMethod: /^append(?:Child)?$/ }
 
 function isCreateStyle(node) {
     return node?.type == 'CallExpression'
         && node.callee?.property?.name == 'createElement'
-        && node.arguments[0]?.value == 'style'
+        && nodeUtils.getStringLiteral(node.arguments[0]) == 'style'
 }
 function isObjectAssign(node) {
     return node?.type == 'CallExpression'
@@ -52,8 +53,8 @@ export default {
         return {
             VariableDeclarator(node) {
                 if (node.id.type != 'Identifier') return
-                if (isCreateStyle(node.init)) styleElems.add(node.id.name)
-                if (node.init?.type == 'Identifier' && isDocumentRef(node.init))
+                if (isCreateStyle(nodeUtils.unwrapTS(node.init))) styleElems.add(node.id.name)
+                if (nodeUtils.unwrapTS(node.init)?.type == 'Identifier' && isDocumentRef(node.init))
                     docAliases.add(node.id.name)
             },
             CallExpression(node) {

package/src/rules/no-deprecated-apis.js

@@ -1,6 +1,8 @@
 import apiUtils from '../utils/api.js'
 import nodeUtils from '../utils/node.js'
 
+const defaultOptions = { target: 'mv3', allowedAPIs: [] }
+
 export default {
     meta: {
         type: 'problem',
@@ -9,7 +11,7 @@ export default {
             category: 'Possible Errors',
             recommended: true
         },
-        defaultOptions: [{ target: 'mv3', allowedAPIs: [] }],
+        defaultOptions: [defaultOptions],
         schema: [{
             type: 'object',
             properties: {
@@ -37,13 +39,11 @@ export default {
     },
 
     create(context) {
-        const opts = context.options[0] || {},
-              target = opts.target || 'mv3',
-              allowedAPIs = Array.isArray(opts.allowedAPIs) ? opts.allowedAPIs
-                          : opts.allowedAPIs ? [opts.allowedAPIs] : []
+        const { target, allowedAPIs } = { ...defaultOptions, ...context.options[0] },
+                allowedAPIsArray = Array.isArray(allowedAPIs) ? allowedAPIs : [allowedAPIs]
         if (target != 'mv3') return {}
         function isAllowed(api) {
-            for (const allowed of allowedAPIs)
+            for (const allowed of allowedAPIsArray)
                 if (api == allowed || api.startsWith(`${allowed}.`)) return true
             return false
         }

package/src/rules/no-global-keyframes.js

@@ -1,5 +1,8 @@
 import regex from '../data/regex.js'
 
+const defaultOptions = { flagCommonNames: true },
+      re = { keyframesHeader: /^@(?:-webkit-)?keyframes\s+([\w-]+)/i, quotes: /^["']|["']$/g }
+
 const commonNames = new Set([
     'blink', 'bounce', 'bounce-in', 'bounce-out', 'fade', 'fade-in', 'fade-in-down', 'fade-in-left', 'fade-in-right',
     'fade-in-up', 'fade-out', 'fade-out-down', 'fade-out-left', 'fade-out-right', 'fade-out-up', 'flip', 'flip-in',
@@ -8,10 +11,6 @@ const commonNames = new Set([
     'slide-out-down', 'slide-out-left', 'slide-out-right', 'slide-out-up', 'spin', 'spinner', 'swing', 'wobble', 'zoom',
     'zoom-in', 'zoom-out'
 ])
-const re = {
-    keyframesHeader: /^@(?:-webkit-)?keyframes\s+([\w-]+)/i,
-    quotes: /^["']|["']$/g
-}
 
 export default {
     meta: {
@@ -21,7 +20,7 @@ export default {
             category: 'Possible Errors',
             css: true
         },
-        defaultOptions: [{}],
+        defaultOptions: [defaultOptions],
         schema: [{
             type: 'object',
             properties: {
@@ -46,9 +45,7 @@ export default {
     },
 
     create(context) {
-        const opts = context.options[0] || {},
-              requiredPrefix = opts.requiredPrefix,
-              flagCommonNames = opts.flagCommonNames !== false
+        const { requiredPrefix, flagCommonNames } = { ...defaultOptions, ...context.options[0] }
         function getKeyframeName(node) {
             const pv = node.prelude?.value
             if (typeof pv == 'string' && pv.trim())

package/src/rules/no-host-page-selectors.js

@@ -1,6 +1,9 @@
 import array from '../utils/array.js'
 import node from '../utils/node.js'
 
+const defaultOptions = {
+    allowedSelectors: [], disallowUniversal: true, disallowStructural: true, disallowBareElements: true }
+
 const re = { keyframeSelector: /^(?:from|to|[\d.]+%)$/i }
 
 export default {
@@ -11,12 +14,7 @@ export default {
             category: 'Possible Errors',
             css: true
         },
-        defaultOptions: [{
-            allowedSelectors: [],
-            disallowUniversal: true,
-            disallowStructural: true,
-            disallowBareElements: true
-        }],
+        defaultOptions: [defaultOptions],
         schema: [{
             type: 'object',
             properties: {
@@ -50,15 +48,13 @@ export default {
     },
 
     create(context) {
-        const opts = context.options[0] || {},
-              allowedSelectors = new Set(array.to(opts.allowedSelectors)),
-              checkUniversal = opts.disallowUniversal !== false,
-              checkStructural = opts.disallowStructural !== false,
-              checkBareElements = opts.disallowBareElements !== false
+        const { allowedSelectors, disallowUniversal, disallowStructural, disallowBareElements }
+            = { ...defaultOptions, ...context.options[0] }
+        const allowedSelectorSet = new Set(array.to(allowedSelectors))
         function checkSelector(selector) {
             if (!selector) return
             const text = getSelectorText(selector).trim()
-            if (re.keyframeSelector.test(text) || allowedSelectors.has(text)) return
+            if (re.keyframeSelector.test(text) || allowedSelectorSet.has(text)) return
             const simples = []
             for (const child of selector.children ?? []) {
                 if (node.plainType(child) == 'Combinator') break
@@ -78,15 +74,15 @@ export default {
                     else if (name) elementTypes.push(name)
                 }
             }
-            if (isUniversal && checkUniversal)
+            if (isUniversal && disallowUniversal)
                 return context.report({ node: selector, messageId: 'universalSelector' })
-            if (isRoot && checkStructural)
+            if (isRoot && disallowStructural)
                 return context.report({ node: selector, messageId: 'structuralSelector', data: { selector: text }})
             for (const type of elementTypes) {
                 if (type == 'html' || type == 'body') {
-                    if (checkStructural)
+                    if (disallowStructural)
                         return context.report({ node: selector, messageId: 'structuralSelector', data: { selector: text }})
-                } else if (checkBareElements && !hasQualifier) {
+                } else if (disallowBareElements && !hasQualifier) {
                     return context.report({ node: selector, messageId: 'elementSelector', data: { selector: text }})
                 }
             }

package/src/rules/no-inline-event-handlers.js

@@ -3,6 +3,8 @@
 import array from '../utils/array.js'
 import html from '../utils/html.js'
 
+const defaultOptions = { allowedAttributes: [] }
+
 const re = {
     attrNameEnd: /[\s=>]/,
     block: {
@@ -55,7 +57,7 @@ export default {
             category: 'Possible Errors',
             html: true
         },
-        defaultOptions: [{ allowedAttributes: [] }],
+        defaultOptions: [defaultOptions],
         schema: [{
             type: 'object',
             properties: {
@@ -76,9 +78,9 @@ export default {
     },
 
     create(context) {
-        const opts = context.options[0] || {},
-              allowedAttributes = new Set(array.to(opts.allowedAttributes ?? []).map(a => a.toLowerCase())),
-              text = context.sourceCode.text
+        const { allowedAttributes } = { ...defaultOptions, ...context.options[0] },
+                allowedAttributesSet = new Set(array.to(allowedAttributes).map(attr => attr.toLowerCase())),
+                text = context.sourceCode.text
         let scanned = false
         function maskContent() {
             return text
@@ -105,7 +107,7 @@ export default {
                 for (const attr of parseAttrs(attrPart)) {
                     if (!re.inlineHandler.test(attr.name)) continue
                     const attrLower = attr.name.toLowerCase()
-                    if (allowedAttributes.has(attrLower)) continue
+                    if (allowedAttributesSet.has(attrLower)) continue
                     context.report({ loc: html.offsetToLoc(text, tagEnd + attr.offset),
                         messageId: 'inlineHandler', data: { attr: attrLower }})
                 }

package/src/rules/no-inline-scripts.js

@@ -1,6 +1,8 @@
 import array from '../utils/array.js'
 import html from '../utils/html.js'
 
+const defaultOptions = { allowedSrcPrefixes: ['chrome-extension://'] }
+
 const re = {
     nonExecutable: /^(?:application\/(?:ld\+)?json|importmap|speculationrules|text\/(?:x-)?template)$/i,
     script: /<script\b([^>]*)>([\s\S]*?)<\/script\s*>/gi
@@ -14,7 +16,7 @@ export default {
             category: 'Possible Errors',
             html: true
         },
-        defaultOptions: [{ allowedSrcPrefixes: ['chrome-extension://'] }],
+        defaultOptions: [defaultOptions],
         schema: [{
             type: 'object',
             properties: {
@@ -29,15 +31,17 @@ export default {
             additionalProperties: false
         }],
         messages: {
-            inlineBody: 'Inline `<script>` bodies are blocked by MV3\'s `script-src \'self\'`. Move the code to an external file.',
-            remoteSrc: 'Remote `<script src="{{src}}">` is blocked by MV3\'s `script-src \'self\'`. Bundle the script or use `chrome.runtime.getURL()`.'
+            inlineBody: 'Inline `<script>` bodies are blocked by MV3\'s `script-src \'self\'`. '
+                      + 'Move the code to an external file.',
+            remoteSrc: 'Remote `<script src="{{src}}">` is blocked by MV3\'s `script-src \'self\'`. '
+                     + 'Bundle the script or use `chrome.runtime.getURL()`.'
         }
     },
 
     create(context) {
-        const opts = context.options[0] || {},
-              allowedPrefixes = array.to(opts.allowedSrcPrefixes ?? ['chrome-extension://']),
-              text = context.sourceCode.text
+        const { allowedSrcPrefixes } = { ...defaultOptions, ...context.options[0] },
+                allowedPrefixes = array.to(allowedSrcPrefixes),
+                text = context.sourceCode.text
         let scanned = false
         function scan() {
             if (scanned) return