eslint-plugin-conventions 4.0.5 → 4.1.0

package/CHANGELOG.md

@@ -0,0 +1,131 @@
+## 4.1.0
+
+### Minor Changes
+
+- [#129](https://github.com/ofri-peretz/eslint/pull/129) [`90b970c`](https://github.com/ofri-peretz/eslint/commit/90b970c547f867ee79ec393ecb4da3f3e22f11f0) Thanks [@ofri-peretz](https://github.com/ofri-peretz)! - Three new rules at `error` severity enforcing the Observability cluster of the design philosophies (ANALYTICS_PHILOSOPHY.md + UTM_PHILOSOPHY.md):
+  - **`utm-taxonomy`** — `utm_source` and `utm_medium` query-param values in any URL string literal must match the fixed taxonomy. Free-text values (`Blog`, `blog_v2`, `BLOG`) destroy joinability in PostHog and are forbidden.
+  - **`no-raw-cross-property-href`** — Hand-written `<a href="https://*.interlace.tools/…">` and `<a href="https://ofriperetz.dev/…">` JSX literals are flagged. The blessed escape hatch is the per-property `buildUtmHref()` helper from `lib/utm.ts`.
+  - **`analytics-event-naming`** — Vendor-neutral. Matches `<obj>.capture()` (PostHog), `<obj>.track()` (Segment / Mixpanel / Amplitude), and bare `track()` (our primitive). Event names must follow `category:object_action` (lowercase snake_case) with action from a fixed verb list; `$`-prefixed reserved events are exempt; template-literal event names are forbidden.
+
+  Also fixes `compareVersions` in `expiring-todo-comments` to normalise wildcards (`24.x` in `engines.node`) — without this, `parseSemver` returned `null` and the comparator falsely matched every `>= engine TODO` as expired.
+
+- [#148](https://github.com/ofri-peretz/eslint/pull/148) [`82718c2`](https://github.com/ofri-peretz/eslint/commit/82718c282895710d42c36d4679fb24d47f1c35c7) Thanks [@ofri-peretz](https://github.com/ofri-peretz)! - feat(no-magic-numbers): add conventions/no-magic-numbers — closes prob_magic_numbers ILB-Arena-Quality FN
+
+  Flags numeric literals that lack a named constant, catching the magic number
+  code smell that makes intent unclear.
+
+  **Built-in allowlist:** `-1, 0, 1, 2` are always allowed as universally idiomatic.
+
+  **Context-aware skips (by default):**
+  - `const` / `export const` declarations — the literal IS the named constant
+  - Array index access: `items[3]` (`ignoreArrayIndexes: true`)
+  - Default parameter values: `function f(n = 1000) {}`
+  - TypeScript enum initializers: `enum Status { Active = 1 }`
+  - Numeric object property keys: `{ 404: 'Not Found' }`
+
+  **Options:** `ignore`, `ignoreArrayIndexes`, `ignoreDefaultValues`, `ignoreEnums`, `ignoreBitwiseExpressions`.
+
+  Added at `warn` severity in `conventions/recommended`.
+
+### Patch Changes
+
+- [#154](https://github.com/ofri-peretz/eslint/pull/154) [`62e67a1`](https://github.com/ofri-peretz/eslint/commit/62e67a154a858b284899e17cfe39606e6bc08427) Thanks [@ofri-peretz](https://github.com/ofri-peretz)! - `no-magic-numbers`: add extract-const suggestion fixer. IDEs now offer a one-click "Extract to named constant" action that inserts a `const MAGIC_<value>` declaration before the containing statement and replaces the literal.
+
+- Updated dependencies [[`736a5fe`](https://github.com/ofri-peretz/eslint/commit/736a5fed47e673f6157ea900b29fe2a54e4bc7df)]:
+  - @interlace/eslint-devkit@1.4.1
+
+## 4.0.7 (2026-02-09)
+
+This was a version bump only for eslint-plugin-conventions to align it with other projects, there were no code changes.
+
+## [4.0.5] - 2026-02-08
+
+This was a version bump only for eslint-plugin-conventions to align it with other projects, there were no code changes.
+
+## [4.0.4] - 2026-02-08
+
+### Bug Fixes
+
+- align codecov component IDs with full package names ([2831b968](https://github.com/ofri-peretz/eslint/commit/2831b968))
+
+### Documentation
+
+- fix changelog header format across all packages ([c3a15082](https://github.com/ofri-peretz/eslint/commit/c3a15082))
+
+### ❤️ Thank You
+
+- Ofri Peretz
+
+## [4.0.3] - 2026-02-06
+
+### Bug Fixes
+
+- align codecov component names and update docs components ([0a59a86c](https://github.com/ofri-peretz/eslint/commit/0a59a86c))
+
+### ❤️ Thank You
+
+- Ofri Peretz
+
+## [4.0.2] - 2026-02-02
+
+This was a version bump only for eslint-plugin-conventions to align it with other projects, there were no code changes.
+
+# Changelog
+
+All notable changes to `eslint-plugin-conventions` will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+### Documentation
+
+- 📘 Launched new documentation site: [eslint.interlace.tools](https://eslint.interlace.tools/)
+- 📝 Achieved 100% documentation parity (both .md and .mdx files)
+
+## [4.0.1] - 2026-02-02
+
+This was a version bump only for eslint-plugin-conventions to align it with other projects, there were no code changes.
+
+## [4.0.0] - 2026-02-02
+
+This was a version bump only for eslint-plugin-conventions to align it with other projects, there were no code changes.
+
+## [3.0.0] - 2026-02-02
+
+This was a version bump only for eslint-plugin-conventions to align it with other projects, there were no code changes.
+
+## [1.0.0] - 2026-01-26
+
+### Added
+
+- Initial stable release with 9 convention rules
+- LLM-optimized error messages for AI-assisted development
+- 100% test coverage across all rules
+- ESLint 9 flat config support
+- TypeScript type definitions for all rule options
+
+### Rules
+
+| Rule                                 | Description                                           | 💼  | ⚠️  |
+| :----------------------------------- | :---------------------------------------------------- | :-: | :-: |
+| `no-commented-code`                  | Disallow commented-out code blocks                    | 💼  | ⚠️  |
+| `expiring-todo-comments`             | Enforce expiration dates on TODO comments             | 💼  | ⚠️  |
+| `prefer-code-point`                  | Prefer `codePointAt` over `charCodeAt` for Unicode    |     |     |
+| `prefer-dom-node-text-content`       | Prefer `textContent` over `innerText` for performance |     |     |
+| `no-console-spaces`                  | Disallow leading/trailing spaces in console calls     |     |     |
+| `no-deprecated-api`                  | Disallow usage of deprecated Node.js APIs             | 💼  | ⚠️  |
+| `prefer-dependency-version-strategy` | Enforce consistent version strategies                 |     |     |
+| `filename-case`                      | Enforce consistent file naming conventions            |     |     |
+| `consistent-existence-index-check`   | Enforce consistent array index existence checks       |     |     |
+
+### Presets
+
+- `recommended` - Balanced conventions for most teams
+
+### Known Limitations
+
+Documented in `docs/KNOWN-LIMITATIONS.md`:
+
+- `filename-case`: Framework-required names (e.g., `webpack.config.js`) require manual exclude lists
+- `no-deprecated-api`: May not detect usage through wrapper libraries
+- `expiring-todo-comments`: Requires consistent date formats (ISO 8601 recommended)

package/LICENSE

@@ -0,0 +1,23 @@
+MIT License
+
+Copyright (c) 2025 Ofri Peretz
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+

package/README.md

@@ -1,23 +1,24 @@
 <p align="center">
-  <a href="https://eslint.interlace.tools" target="blank"><img src="https://eslint.interlace.tools/eslint-interlace-logo-light.svg" alt="ESLint Interlace Logo" width="120" /></a>
+  <a href="https://eslint.interlace.tools/?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-conventions" target="blank"><img src="https://eslint.interlace.tools/eslint-interlace-logo-light.svg" alt="ESLint Interlace Logo" width="120" /></a>
 </p>
 
 <p align="center">
-  Security-focused ESLint plugin.
+  Project conventions: naming, file structure, and code style consistency.
 </p>
 
 <p align="center">
   <a href="https://www.npmjs.com/package/eslint-plugin-conventions" target="_blank"><img src="https://img.shields.io/npm/v/eslint-plugin-conventions.svg" alt="NPM Version" /></a>
   <a href="https://www.npmjs.com/package/eslint-plugin-conventions" target="_blank"><img src="https://img.shields.io/npm/dm/eslint-plugin-conventions.svg" alt="NPM Downloads" /></a>
   <a href="https://opensource.org/licenses/MIT" target="_blank"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="Package License" /></a>
-  <a href="https://app.codecov.io/gh/ofri-peretz/eslint/components?components%5B0%5D=conventions" target="_blank"><img src="https://codecov.io/gh/ofri-peretz/eslint/graph/badge.svg?component=eslint-plugin-conventions" alt="Codecov" /></a>
+  <a href="https://app.codecov.io/gh/ofri-peretz/eslint/components?components%5B0%5D=conventions" target="_blank"><img src="https://codecov.io/gh/ofri-peretz/eslint/graph/badge.svg?component=conventions" alt="Codecov" /></a>
   <a href="https://github.com/ofri-peretz/eslint" target="_blank"><img src="https://img.shields.io/badge/Since-Dec_2025-blue?logo=rocket&logoColor=white" alt="Since Dec 2025" /></a>
 </p>
 
+> ⭐ If this plugin caught a real bug for you, [**star the repo**](https://github.com/ofri-peretz/eslint) — it's the signal that keeps these rules maintained.
+
 ## Description
 
-This plugin provides Security-focused ESLint plugin.
-By using this plugin, you can proactively identify and mitigate security risks across your entire codebase.
+This plugin provides Project conventions: naming, file structure, and code style consistency.
 
 ## Philosophy
 
@@ -25,12 +26,12 @@ By using this plugin, you can proactively identify and mitigate security risks a
 
 ## Getting Started
 
-- To check out the [guide](https://eslint.interlace.tools/docs/quality/plugin-conventions), visit [eslint.interlace.tools](https://eslint.interlace.tools). 📚
-- 要查看中文 [指南](https://eslint.interlace.tools/docs/quality/plugin-conventions), 请访问 [eslint.interlace.tools](https://eslint.interlace.tools). 📚
-- [가이드](https://eslint.interlace.tools/docs/quality/plugin-conventions) 문서는 [eslint.interlace.tools](https://eslint.interlace.tools)에서 확인하실 수 있습니다. 📚
-- [ガイド](https://eslint.interlace.tools/docs/quality/plugin-conventions)は [eslint.interlace.tools](https://eslint.interlace.tools)でご確認ください。 📚
-- Para ver la [guía](https://eslint.interlace.tools/docs/quality/plugin-conventions), visita [eslint.interlace.tools](https://eslint.interlace.tools). 📚
-- للاطلاع على [الدليل](https://eslint.interlace.tools/docs/quality/plugin-conventions)، قم بزيارة [eslint.interlace.tools](https://eslint.interlace.tools). 📚
+- To check out the [guide](https://eslint.interlace.tools/docs/quality/plugin-conventions?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-conventions), visit [eslint.interlace.tools](https://eslint.interlace.tools/?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-conventions). 📚
+- 要查看中文 [指南](https://eslint.interlace.tools/docs/quality/plugin-conventions?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-conventions), 请访问 [eslint.interlace.tools](https://eslint.interlace.tools/?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-conventions). 📚
+- [가이드](https://eslint.interlace.tools/docs/quality/plugin-conventions?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-conventions) 문서는 [eslint.interlace.tools](https://eslint.interlace.tools/?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-conventions)에서 확인하실 수 있습니다. 📚
+- [ガイド](https://eslint.interlace.tools/docs/quality/plugin-conventions?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-conventions)は [eslint.interlace.tools](https://eslint.interlace.tools/?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-conventions)でご確認ください。 📚
+- Para ver la [guía](https://eslint.interlace.tools/docs/quality/plugin-conventions?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-conventions), visita [eslint.interlace.tools](https://eslint.interlace.tools/?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-conventions). 📚
+- للاطلاع على [الدليل](https://eslint.interlace.tools/docs/quality/plugin-conventions?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-conventions)، قم بزيارة [eslint.interlace.tools](https://eslint.interlace.tools/?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-conventions). 📚
 
 ```bash
 npm install eslint-plugin-conventions --save-dev
@@ -53,6 +54,14 @@ export default [conventions.configs.recommended];
 
 ---
 
+## 📦 Compatibility
+| Package | Version |
+| :--- | :--- |
+| ESLint | `^8.0.0 \|\| ^9.0.0 \|\| ^10.0.0` |
+| Node.js | `>=18.0.0` |
+
+See the [ESLint Version Support Policy](../../docs/ESLINT_VERSION_SUPPORT.md) — current ecosystem share data, the 20% gate, and the forward-looking exception that covers v10.
+
 ## Rules
 
 **Legend**
@@ -60,17 +69,29 @@ export default [conventions.configs.recommended];
 | Icon | Description |
 | :---: | :--- |
 | 💼 | **Recommended**: Included in the recommended preset. |
-| ⚠️ | **Warns**: Set towarn in recommended preset. |
+| ⚠️ | **Warns**: Set to warn in recommended preset. |
 | 🔧 | **Auto-fixable**: Automatically fixable by the `--fix` CLI option. |
 | 💡 | **Suggestions**: Providing code suggestions in IDE. |
 | 🚫 | **Deprecated**: This rule is deprecated. |
-
-| Rule | CWE | OWASP | CVSS | Description | 💼 | ⚠️ | 🔧 | 💡 | 🚫 |
-| :--- | :---: | :---: | :---: | :--- | :---: | :---: | :---: | :---: | :---: |
-| [conventions](https://eslint.interlace.tools/docs/quality/plugin-conventions/rules/conventions) |  |  |  | Enforce conventions |  |  |  |  |  |
-| [deprecation](https://eslint.interlace.tools/docs/quality/plugin-conventions/rules/deprecation) |  |  |  | Enforce deprecation |  |  |  |  |  |
-| [development](https://eslint.interlace.tools/docs/quality/plugin-conventions/rules/development) |  |  |  | Enforce development |  |  |  |  |  |
-
+| 🟢 | **Type-unaware**: AST-only, runs in oxlint JS-plugin tier. |
+| 🟡 | **Type-aware (refining)**: pure-AST primary path; types refine precision. |
+| 🟠 | **Type-aware (graceful)**: requires TS program; silent without it. |
+
+<!-- AUTO-GENERATED:RULES_TABLE:START - Do not edit manually -->
+| Rule | CWE | OWASP | CVSS | Description | 🧠 | 💼 | ⚠️ | 🔧 | 💡 | 🚫 |
+| :--- | :---: | :---: | :---: | :--- | :---: | :---: | :---: | :---: | :---: | :---: |
+| [consistent-existence-index-check](https://eslint.interlace.tools/docs/quality/plugin-conventions/rules/consistent-existence-index-check?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-conventions) |  |  |  | Enforce consistent style for checking if an element exists in an array | 🟢 |  |  |  | 💡 |  |
+| [expiring-todo-comments](https://eslint.interlace.tools/docs/quality/plugin-conventions/rules/expiring-todo-comments?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-conventions) |  |  |  | Add expiration conditions to TODO comments to prevent forgotten tasks. This rule is part of eslint-plugin-c… | 🟢 |  | ⚠️ |  | 💡 |  |
+| [filename-case](https://eslint.interlace.tools/docs/quality/plugin-conventions/rules/filename-case?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-conventions) |  |  |  | Enforce filename case conventions for consistency across your codebase | 🟢 |  |  |  | 💡 |  |
+| [no-commented-code](https://eslint.interlace.tools/docs/quality/plugin-conventions/rules/no-commented-code?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-conventions) |  |  |  | ESLint Rule: no-commented-code with LLM-optimized suggestions and auto-fix capabilities. | 🟢 |  | ⚠️ |  | 💡 |  |
+| [no-console-spaces](https://eslint.interlace.tools/docs/quality/plugin-conventions/rules/no-console-spaces?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-conventions) |  |  |  | Disallow leading/trailing whitespace in console arguments. This rule is part of eslint-plugin-conventions. | 🟢 |  |  |  | 💡 |  |
+| [no-deprecated-api](https://eslint.interlace.tools/docs/quality/plugin-conventions/rules/no-deprecated-api?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-conventions) | CWE-1078 |  |  | Prevent usage of deprecated APIs with migration context and timeline. This rule is part of eslint-plugin-co… | 🟢 |  | ⚠️ |  | 💡 |  |
+| [no-json-schema-tags](https://eslint.interlace.tools/docs/quality/plugin-conventions/rules/no-json-schema-tags?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-conventions) |  |  |  | Disallow JSON Schema keywords (e.g. @minimum, @maximum, @pattern, @format) used as JSDoc tags. | 🟢 |  |  |  | 💡 |  |
+| [prefer-code-point](https://eslint.interlace.tools/docs/quality/plugin-conventions/rules/prefer-code-point?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-conventions) |  |  |  | Prefer String.codePointAt() over String.charCodeAt(). This rule is part of eslint-plugin-conventions. | 🟢 |  |  |  | 💡 |  |
+| [prefer-dependency-version-strategy](https://eslint.interlace.tools/docs/quality/plugin-conventions/rules/prefer-dependency-version-strategy?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-conventions) |  |  |  | Enforce consistent version strategy (caret ^, tilde ~, exact, range, or any) for package.json dependencies.… | 🟢 |  |  |  | 💡 |  |
+| [prefer-dom-node-text-content](https://eslint.interlace.tools/docs/quality/plugin-conventions/rules/prefer-dom-node-text-content?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-conventions) |  |  |  | Prefer textContent over innerText. This rule is part of eslint-plugin-conventions. | 🟢 |  |  |  | 💡 |  |
+| [require-data-testid](https://eslint.interlace.tools/docs/quality/plugin-conventions/rules/require-data-testid?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-conventions) |  |  |  | Require stable data-testid attributes on interactive elements for end-to-end test reliability | 🟢 |  |  |  | 💡 |  |
+<!-- AUTO-GENERATED:RULES_TABLE:END -->
 ## 🔗 Related ESLint Plugins
 
 Part of the **Interlace ESLint Ecosystem** — AI-native security plugins with LLM-optimized error messages:
@@ -79,7 +100,7 @@ Part of the **Interlace ESLint Ecosystem** — AI-native security plugins with L
 | :--- | :---: | :--- |
 | [`eslint-plugin-secure-coding`](https://www.npmjs.com/package/eslint-plugin-secure-coding) | [![downloads](https://img.shields.io/npm/dt/eslint-plugin-secure-coding.svg?style=flat-square)](https://www.npmjs.com/package/eslint-plugin-secure-coding) | General security rules & OWASP guidelines. |
 | [`eslint-plugin-pg`](https://www.npmjs.com/package/eslint-plugin-pg) | [![downloads](https://img.shields.io/npm/dt/eslint-plugin-pg.svg?style=flat-square)](https://www.npmjs.com/package/eslint-plugin-pg) | PostgreSQL security & best practices. |
-| [`eslint-plugin-crypto`](https://www.npmjs.com/package/eslint-plugin-crypto) | [![downloads](https://img.shields.io/npm/dt/eslint-plugin-crypto.svg?style=flat-square)](https://www.npmjs.com/package/eslint-plugin-crypto) | NodeJS Cryptography security rules. |
+| [`eslint-plugin-node-security`](https://www.npmjs.com/package/eslint-plugin-node-security) | [![downloads](https://img.shields.io/npm/dt/eslint-plugin-node-security.svg?style=flat-square)](https://www.npmjs.com/package/eslint-plugin-node-security) | Node.js core-module security (fs, child_process, vm, crypto, Buffer). |
 | [`eslint-plugin-jwt`](https://www.npmjs.com/package/eslint-plugin-jwt) | [![downloads](https://img.shields.io/npm/dt/eslint-plugin-jwt.svg?style=flat-square)](https://www.npmjs.com/package/eslint-plugin-jwt) | JWT security & best practices. |
 | [`eslint-plugin-browser-security`](https://www.npmjs.com/package/eslint-plugin-browser-security) | [![downloads](https://img.shields.io/npm/dt/eslint-plugin-browser-security.svg?style=flat-square)](https://www.npmjs.com/package/eslint-plugin-browser-security) | Browser-specific security & XSS prevention. |
 | [`eslint-plugin-express-security`](https://www.npmjs.com/package/eslint-plugin-express-security) | [![downloads](https://img.shields.io/npm/dt/eslint-plugin-express-security.svg?style=flat-square)](https://www.npmjs.com/package/eslint-plugin-express-security) | Express.js security hardening rules. |
@@ -89,10 +110,19 @@ Part of the **Interlace ESLint Ecosystem** — AI-native security plugins with L
 | [`eslint-plugin-vercel-ai-security`](https://www.npmjs.com/package/eslint-plugin-vercel-ai-security) | [![downloads](https://img.shields.io/npm/dt/eslint-plugin-vercel-ai-security.svg?style=flat-square)](https://www.npmjs.com/package/eslint-plugin-vercel-ai-security) | Vercel AI SDK security hardening. |
 | [`eslint-plugin-import-next`](https://www.npmjs.com/package/eslint-plugin-import-next) | [![downloads](https://img.shields.io/npm/dt/eslint-plugin-import-next.svg?style=flat-square)](https://www.npmjs.com/package/eslint-plugin-import-next) | Next-gen import sorting & architecture. |
 
+<!-- INTERLACE:STAR_CTA:START -->
+## ⭐ Support & follow
+
+If this plugin caught a real bug for you, **[star the repo](https://github.com/ofri-peretz/eslint)** — stars are the signal that keeps the Interlace ESLint ecosystem maintained — and **[follow the writeups on Dev.to](https://dev.to/ofri-peretz)** for the benchmarks and security research behind these rules.
+
+[![GitHub stars](https://img.shields.io/github/stars/ofri-peretz/eslint?style=social)](https://github.com/ofri-peretz/eslint)
+
+<!-- INTERLACE:STAR_CTA:END -->
+
 ## 📄 License
 
 MIT © [Ofri Peretz](https://github.com/ofri-peretz)
 
 <p align="center">
-  <a href="https://eslint.interlace.tools/docs/quality/plugin-conventions"><img src="https://eslint.interlace.tools/images/og-conventions.png" alt="ESLint Interlace Plugin" width="100%" /></a>
+  <a href="https://eslint.interlace.tools/docs/quality/plugin-conventions?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-conventions"><img src="https://eslint.interlace.tools/images/og-conventions.png" alt="ESLint Interlace Plugin" width="100%" /></a>
 </p>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eslint-plugin-conventions",
-  "version": "4.0.5",
+  "version": "4.1.0",
   "description": "ESLint rules for team-specific disciplinary patterns and code conventions.",
   "type": "commonjs",
   "main": "./src/index.js",
@@ -9,6 +9,10 @@
     ".": {
       "types": "./src/index.d.ts",
       "default": "./src/index.js"
+    },
+    "./oxlint": {
+      "types": "./src/oxlint.d.ts",
+      "default": "./src/oxlint.js"
     }
   },
   "author": "Ofri Peretz <ofriperetzdev@gmail.com>",
@@ -48,8 +52,21 @@
     "url": "https://github.com/ofri-peretz/eslint",
     "directory": "packages/eslint-plugin-conventions"
   },
-  "homepage": "https://github.com/ofri-peretz/eslint/tree/main/packages/eslint-plugin-conventions#readme",
+  "homepage": "https://eslint.interlace.tools/docs/quality/plugin-conventions?utm_source=npm&utm_medium=referral&utm_campaign=eslint-plugin-conventions",
   "bugs": {
     "url": "https://github.com/ofri-peretz/eslint/issues"
+  },
+  "scripts": {
+    "build": "tsx ../../scripts/build-package.ts",
+    "test": "vitest run",
+    "test:coverage": "vitest run --coverage",
+    "typecheck": "tsc -p tsconfig.lib.json --noEmit"
+  },
+  "peerDependencies": {
+    "eslint": "^8.0.0 || ^9.0.0 || ^10.0.0"
+  },
+  "funding": {
+    "type": "github",
+    "url": "https://github.com/ofri-peretz/eslint"
   }
-}
+}

package/src/index.d.ts

@@ -35,6 +35,21 @@ export declare const rules: {
     'no-json-schema-tags': TSESLint.RuleModule<"jsonSchemaTag" | "moveToDescription", [(import("./rules/conventions/no-json-schema-tags").Options | undefined)?], unknown, TSESLint.RuleListener> & {
         name: string;
     };
+    'require-data-testid': TSESLint.RuleModule<"missingDataTestId" | "dynamicDataTestId", [(import("./rules/conventions/require-data-testid").Options | undefined)?], unknown, TSESLint.RuleListener> & {
+        name: string;
+    };
+    'utm-taxonomy': TSESLint.RuleModule<"invalidUtmSource" | "invalidUtmMedium", [], unknown, TSESLint.RuleListener> & {
+        name: string;
+    };
+    'no-raw-cross-property-href': TSESLint.RuleModule<"rawCrossPropertyHref", [], unknown, TSESLint.RuleListener> & {
+        name: string;
+    };
+    'analytics-event-naming': TSESLint.RuleModule<"invalidEventName" | "interpolatedEventName", [], unknown, TSESLint.RuleListener> & {
+        name: string;
+    };
+    'no-magic-numbers': TSESLint.RuleModule<"noMagicNumber" | "extractConst", [(import("./rules/conventions/no-magic-numbers").Options | undefined)?], unknown, TSESLint.RuleListener> & {
+        name: string;
+    };
 };
 export declare const plugin: {
     meta: {
@@ -72,6 +87,21 @@ export declare const plugin: {
         'no-json-schema-tags': TSESLint.RuleModule<"jsonSchemaTag" | "moveToDescription", [(import("./rules/conventions/no-json-schema-tags").Options | undefined)?], unknown, TSESLint.RuleListener> & {
             name: string;
         };
+        'require-data-testid': TSESLint.RuleModule<"missingDataTestId" | "dynamicDataTestId", [(import("./rules/conventions/require-data-testid").Options | undefined)?], unknown, TSESLint.RuleListener> & {
+            name: string;
+        };
+        'utm-taxonomy': TSESLint.RuleModule<"invalidUtmSource" | "invalidUtmMedium", [], unknown, TSESLint.RuleListener> & {
+            name: string;
+        };
+        'no-raw-cross-property-href': TSESLint.RuleModule<"rawCrossPropertyHref", [], unknown, TSESLint.RuleListener> & {
+            name: string;
+        };
+        'analytics-event-naming': TSESLint.RuleModule<"invalidEventName" | "interpolatedEventName", [], unknown, TSESLint.RuleListener> & {
+            name: string;
+        };
+        'no-magic-numbers': TSESLint.RuleModule<"noMagicNumber" | "extractConst", [(import("./rules/conventions/no-magic-numbers").Options | undefined)?], unknown, TSESLint.RuleListener> & {
+            name: string;
+        };
     };
 };
 export declare const configs: {
@@ -113,6 +143,21 @@ export declare const configs: {
                     'no-json-schema-tags': TSESLint.RuleModule<"jsonSchemaTag" | "moveToDescription", [(import("./rules/conventions/no-json-schema-tags").Options | undefined)?], unknown, TSESLint.RuleListener> & {
                         name: string;
                     };
+                    'require-data-testid': TSESLint.RuleModule<"missingDataTestId" | "dynamicDataTestId", [(import("./rules/conventions/require-data-testid").Options | undefined)?], unknown, TSESLint.RuleListener> & {
+                        name: string;
+                    };
+                    'utm-taxonomy': TSESLint.RuleModule<"invalidUtmSource" | "invalidUtmMedium", [], unknown, TSESLint.RuleListener> & {
+                        name: string;
+                    };
+                    'no-raw-cross-property-href': TSESLint.RuleModule<"rawCrossPropertyHref", [], unknown, TSESLint.RuleListener> & {
+                        name: string;
+                    };
+                    'analytics-event-naming': TSESLint.RuleModule<"invalidEventName" | "interpolatedEventName", [], unknown, TSESLint.RuleListener> & {
+                        name: string;
+                    };
+                    'no-magic-numbers': TSESLint.RuleModule<"noMagicNumber" | "extractConst", [(import("./rules/conventions/no-magic-numbers").Options | undefined)?], unknown, TSESLint.RuleListener> & {
+                        name: string;
+                    };
                 };
             };
         };
@@ -120,6 +165,10 @@ export declare const configs: {
             'conventions/no-commented-code': "warn";
             'conventions/expiring-todo-comments': "warn";
             'conventions/no-deprecated-api': "warn";
+            'conventions/utm-taxonomy': "error";
+            'conventions/no-raw-cross-property-href': "error";
+            'conventions/analytics-event-naming': "error";
+            'conventions/no-magic-numbers': "warn";
         };
     };
 };

package/src/index.js

@@ -17,6 +17,11 @@ const prefer_dependency_version_strategy_1 = require("./rules/conventions/prefer
 const filename_case_1 = require("./rules/conventions/filename-case");
 const consistent_existence_index_check_1 = require("./rules/conventions/consistent-existence-index-check");
 const no_json_schema_tags_1 = require("./rules/conventions/no-json-schema-tags");
+const require_data_testid_1 = require("./rules/conventions/require-data-testid");
+const utm_taxonomy_1 = require("./rules/conventions/utm-taxonomy");
+const no_raw_cross_property_href_1 = require("./rules/conventions/no-raw-cross-property-href");
+const analytics_event_naming_1 = require("./rules/conventions/analytics-event-naming");
+const no_magic_numbers_1 = require("./rules/conventions/no-magic-numbers");
 exports.rules = {
     'no-commented-code': no_commented_code_1.noCommentedCode,
     'expiring-todo-comments': expiring_todo_comments_1.expiringTodoComments,
@@ -28,11 +33,16 @@ exports.rules = {
     'filename-case': filename_case_1.filenameCase,
     'consistent-existence-index-check': consistent_existence_index_check_1.consistentExistenceIndexCheck,
     'no-json-schema-tags': no_json_schema_tags_1.noJsonSchemaTags,
+    'require-data-testid': require_data_testid_1.requireDataTestId,
+    'utm-taxonomy': utm_taxonomy_1.utmTaxonomy,
+    'no-raw-cross-property-href': no_raw_cross_property_href_1.noRawCrossPropertyHref,
+    'analytics-event-naming': analytics_event_naming_1.analyticsEventNaming,
+    'no-magic-numbers': no_magic_numbers_1.noMagicNumbers,
 };
 exports.plugin = {
     meta: {
         name: 'eslint-plugin-conventions',
-        version: '1.0.0',
+        version: '4.1.0',
     },
     rules: exports.rules,
 };
@@ -45,6 +55,10 @@ exports.configs = {
             'conventions/no-commented-code': 'warn',
             'conventions/expiring-todo-comments': 'warn',
             'conventions/no-deprecated-api': 'warn',
+            'conventions/utm-taxonomy': 'error',
+            'conventions/no-raw-cross-property-href': 'error',
+            'conventions/analytics-event-naming': 'error',
+            'conventions/no-magic-numbers': 'warn',
         },
     },
 };

package/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../packages/eslint-plugin-conventions/src/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAIH,oBAAoB;AACpB,6EAAwE;AACxE,uFAAkF;AAClF,6EAAwE;AACxE,mGAA4F;AAC5F,6EAAwE;AACxE,6EAAwE;AACxE,+GAAyG;AACzG,qEAAiE;AACjE,2GAAqG;AACrG,iFAA2E;AAE9D,QAAA,KAAK,GAAG;IACnB,mBAAmB,EAAE,mCAAe;IACpC,wBAAwB,EAAE,6CAAoB;IAC9C,mBAAmB,EAAE,mCAAe;IACpC,8BAA8B,EAAE,uDAAwB;IACxD,mBAAmB,EAAE,mCAAe;IACpC,mBAAmB,EAAE,mCAAe;IACpC,oCAAoC,EAAE,oEAA+B;IACrE,eAAe,EAAE,4BAAY;IAC7B,kCAAkC,EAAE,gEAA6B;IACjE,qBAAqB,EAAE,sCAAgB;CACkC,CAAC;AAE/D,QAAA,MAAM,GAAG;IACpB,IAAI,EAAE;QACJ,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,OAAO;KACjB;IACD,KAAK,EAAL,aAAK;CAC+B,CAAC;AAE1B,QAAA,OAAO,GAAG;IACrB,WAAW,EAAE;QACX,OAAO,EAAE;YACP,WAAW,EAAE,cAAM;SACpB;QACD,KAAK,EAAE;YACL,+BAA+B,EAAE,MAAM;YACvC,oCAAoC,EAAE,MAAM;YAC5C,+BAA+B,EAAE,MAAM;SACxC;KACmC;CACc,CAAC;AAEvD,kBAAe,cAAM,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAIH,oBAAoB;AACpB,6EAAwE;AACxE,uFAAkF;AAClF,6EAAwE;AACxE,mGAA4F;AAC5F,6EAAwE;AACxE,6EAAwE;AACxE,+GAAyG;AACzG,qEAAiE;AACjE,2GAAqG;AACrG,iFAA2E;AAC3E,iFAA4E;AAC5E,mEAA+D;AAC/D,+FAAwF;AACxF,uFAAkF;AAClF,2EAAsE;AAEzD,QAAA,KAAK,GAAG;IACnB,mBAAmB,EAAE,mCAAe;IACpC,wBAAwB,EAAE,6CAAoB;IAC9C,mBAAmB,EAAE,mCAAe;IACpC,8BAA8B,EAAE,uDAAwB;IACxD,mBAAmB,EAAE,mCAAe;IACpC,mBAAmB,EAAE,mCAAe;IACpC,oCAAoC,EAAE,oEAA+B;IACrE,eAAe,EAAE,4BAAY;IAC7B,kCAAkC,EAAE,gEAA6B;IACjE,qBAAqB,EAAE,sCAAgB;IACvC,qBAAqB,EAAE,uCAAiB;IACxC,cAAc,EAAE,0BAAW;IAC3B,4BAA4B,EAAE,mDAAsB;IACpD,wBAAwB,EAAE,6CAAoB;IAC9C,kBAAkB,EAAE,iCAAc;CACuC,CAAC;AAE/D,QAAA,MAAM,GAAG;IACpB,IAAI,EAAE;QACJ,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,OAAO;KACjB;IACD,KAAK,EAAL,aAAK;CAC+B,CAAC;AAE1B,QAAA,OAAO,GAAG;IACrB,WAAW,EAAE;QACX,OAAO,EAAE;YACP,WAAW,EAAE,cAAM;SACpB;QACD,KAAK,EAAE;YACL,+BAA+B,EAAE,MAAM;YACvC,oCAAoC,EAAE,MAAM;YAC5C,+BAA+B,EAAE,MAAM;YACvC,0BAA0B,EAAE,OAAO;YACnC,wCAAwC,EAAE,OAAO;YACjD,oCAAoC,EAAE,OAAO;YAC7C,8BAA8B,EAAE,MAAM;SACvC;KACmC;CACc,CAAC;AAEvD,kBAAe,cAAM,CAAC"}

package/src/lib/eslint-plugin-conventions.js.map

@@ -1 +1 @@
-{"version":3,"file":"eslint-plugin-conventions.js","sourceRoot":"","sources":["../../../../../packages/eslint-plugin-conventions/src/lib/eslint-plugin-conventions.ts"],"names":[],"mappings":";;AAAA,0DAEC;AAFD,SAAgB,uBAAuB;IACrC,OAAO,2BAA2B,CAAC;AACrC,CAAC"}
+{"version":3,"file":"eslint-plugin-conventions.js","sourceRoot":"","sources":["../../../src/lib/eslint-plugin-conventions.ts"],"names":[],"mappings":";;AAAA,0DAEC;AAFD,SAAgB,uBAAuB;IACrC,OAAO,2BAA2B,CAAC;AACrC,CAAC"}

package/src/oxlint.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Copyright (c) 2025 Ofri Peretz
+ * Licensed under the MIT License. Use of this source code is governed by the
+ * MIT license that can be found in the LICENSE file.
+ */
+/**
+ * oxlint sub-export.
+ *
+ * Consumers wire oxlint to this entry via:
+ *   { "jsPlugins": ["eslint-plugin-conventions/oxlint"] }
+ *
+ * oxlint's JS plugin loader does `require('eslint-plugin-conventions/oxlint')` and reads
+ * `.rules` off the result. The compiled output of `export = plugin` is
+ * `module.exports = plugin`, which gives oxlint the plugin object directly
+ * (`{ meta, rules }`) — no wrapper, no `.default` indirection.
+ *
+ * Generated by scripts/generate-oxlint-shims.mjs. Do not edit by hand.
+ */
+import { plugin } from './index';
+export = plugin;

package/src/oxlint.js

@@ -0,0 +1,22 @@
+"use strict";
+/**
+ * Copyright (c) 2025 Ofri Peretz
+ * Licensed under the MIT License. Use of this source code is governed by the
+ * MIT license that can be found in the LICENSE file.
+ */
+/**
+ * oxlint sub-export.
+ *
+ * Consumers wire oxlint to this entry via:
+ *   { "jsPlugins": ["eslint-plugin-conventions/oxlint"] }
+ *
+ * oxlint's JS plugin loader does `require('eslint-plugin-conventions/oxlint')` and reads
+ * `.rules` off the result. The compiled output of `export = plugin` is
+ * `module.exports = plugin`, which gives oxlint the plugin object directly
+ * (`{ meta, rules }`) — no wrapper, no `.default` indirection.
+ *
+ * Generated by scripts/generate-oxlint-shims.mjs. Do not edit by hand.
+ */
+const index_1 = require("./index");
+module.exports = index_1.plugin;
+//# sourceMappingURL=oxlint.js.map

package/src/oxlint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oxlint.js","sourceRoot":"","sources":["../../src/oxlint.ts"],"names":[],"mappings":";AAAA;;;;GAIG;AAEH;;;;;;;;;;;;GAYG;AAEH,mCAAiC;AAEjC,iBAAS,cAAM,CAAC"}

package/src/rules/conventions/analytics-event-naming.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Copyright (c) 2025 Ofri Peretz
+ * Licensed under the MIT License. Use of this source code is governed by the
+ * MIT license that can be found in the LICENSE file.
+ */
+/**
+ * ESLint Rule: analytics-event-naming
+ *
+ * Vendor-neutral. Validates the first argument of analytics event-capture
+ * calls against the naming grammar codified in ANALYTICS_PHILOSOPHY.md
+ * principle 4:
+ *
+ *   `category:object_action`
+ *
+ * - `category` and `object` are lowercase snake_case identifiers.
+ * - `action` is one of a fixed verb list (present tense): click, submit,
+ *   view, add, remove, start, end, generate, send, cancel, fail, create,
+ *   delete, update, invite.
+ * - Vendor reserved events starting with `$` (e.g. PostHog `$pageview`,
+ *   `$set`) are exempt.
+ * - Template-literal event names are forbidden — they make the catalog
+ *   unbounded (principle 3).
+ *
+ * Matched call shapes (covers PostHog, Segment, Mixpanel, Amplitude
+ * conventions plus our own primitives):
+ *
+ * - `<obj>.capture(name, props)`  — PostHog
+ * - `<obj>.track(name, props)`    — Segment / Mixpanel / Amplitude
+ * - `track(name, props)`          — bare, our primitive
+ *
+ * Not matched:
+ *
+ * - `<obj>.identify(distinctId, props)` — first arg is a person id
+ * - `<obj>.page(...)` / `pageview(...)` — event name is implicit
+ */
+import type { TSESLint } from '@interlace/eslint-devkit';
+type MessageIds = 'invalidEventName' | 'interpolatedEventName';
+export declare const analyticsEventNaming: TSESLint.RuleModule<MessageIds, [], unknown, TSESLint.RuleListener> & {
+    name: string;
+};
+export {};