eslint-plugin-greasemonkey 1.5.2 → 1.7.0

package/README.md

@@ -46,13 +46,13 @@ export default [
         rules: {
             ...greasemonkey.configs.recommended.rules,
             'greasemonkey/no-unused-resources': 'off',  // selectively disable rule
-            'greasemonkey/meta-spacing': ['error', 2]   // selectively tweak rule
+            'greasemonkey/meta-spacing': ['error', { spaces: 2 }]  // selectively tweak rule
         }
     }
 ]
 ```
 
-Avaialble bundles: `recommended`, `strict`, `tampermonkey`, `violentmonkey`, `greasemonkey`, `scriptcat`
+Avaialble bundles: `recommended`, `strict`, `tampermonkey`, `violentmonkey`, `greasemonkey`, `scriptcat`, `adguard`
 
 **Note:** Rule config is either a severity string (`'off'`, `'warn'`, `'error'`) or an array `[severity, options]` when the rule accepts options.
 
@@ -70,10 +70,10 @@ Avaialble bundles: `recommended`, `strict`, `tampermonkey`, `violentmonkey`, `gr
     <a title="Only included in strict config" href="#usage">
         <img height=18 alt="[Strict only]" src="https://img.shields.io/badge/Strict_only-ff8c42?style=flat-square" align="middle"></a>
     <a title="Accepts eslint --fix" target="_blank" href="https://eslint.org/docs/latest/use/command-line-interface#--fix">
-        <img height=18 alt="[Auto-fixable]" src="https://img.shields.io/badge/Auto--fixable-e8357a?style=flat-square" align="middle"></a>
+        <img height=18 alt="[Auto-fixable]" src="https://img.shields.io/badge/Auto--fixable-3b5bdb?style=flat-square" align="middle"></a>
     <a title="Doesn't prevent bugs" href="#meta-order">
         <img height=18 alt="[Stylistic]" src="https://img.shields.io/badge/Stylistic-af68ff?style=flat-square" align="middle"></a>
-    <a title="Accepts array w/ options" target="_blank" href="https://eslint.org/docs/latest/extend/custom-rules#option-defaults">
+    <a title="Accepts array w/ options" href="#usage">
         <img height=18 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
     <a title="Copy rule URL" target="_blank" 
        href="https://copy-to-clipboard.onrender.com/copy/https%3A%2F%2Fcodeberg.org%2Fadamlui%2Feslint-plugin-greasemonkey%2F%23meta-order">
@@ -86,7 +86,7 @@ Avaialble bundles: `recommended`, `strict`, `tampermonkey`, `violentmonkey`, `gr
 
 #### Options
 
-- `string[]` (default `[]`) – metadata keys in custom order
+- `order` (default `[]`) – metadata keys in custom order (e.g. `['license', 'namespace']`) to selectively override built-in order with
 
 #### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/gray.svg" align="bottom"> Incorrect code
 
@@ -97,7 +97,7 @@ Avaialble bundles: `recommended`, `strict`, `tampermonkey`, `violentmonkey`, `gr
   // @description   A script
 ! // @namespace     example.com
   // @author        John Doe
-! // @license       MIT
+  // @license       MIT
   // ==/UserScript==
 ```
 
@@ -110,10 +110,9 @@ Avaialble bundles: `recommended`, `strict`, `tampermonkey`, `violentmonkey`, `gr
   // @description   A script
 - // @namespace     example.com
   // @author        John Doe
-- // @license       MIT
 + // @namespace     example.com
 + // @version       1.0.0
-+ // @license       MIT
+  // @license       MIT
   // ==/UserScript==
 ```
 
@@ -145,10 +144,10 @@ If you don't care about the order of metadata fields.
     <a title="Included in recommended config" href="#usage">
         <img height=18 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
     <a title="Accepts eslint --fix" target="_blank" href="https://eslint.org/docs/latest/use/command-line-interface#--fix">
-        <img height=18 alt="[Auto-fixable]" src="https://img.shields.io/badge/Auto--fixable-e8357a?style=flat-square" align="middle"></a>
+        <img height=18 alt="[Auto-fixable]" src="https://img.shields.io/badge/Auto--fixable-3b5bdb?style=flat-square" align="middle"></a>
     <a title="Doesn't prevent bugs" href="#meta-spacing">
         <img height=18 alt="[Stylistic]" src="https://img.shields.io/badge/Stylistic-af68ff?style=flat-square" align="middle"></a>
-    <a title="Accepts array w/ options" target="_blank" href="https://eslint.org/docs/latest/extend/custom-rules#option-defaults">
+    <a title="Accepts array w/ options" href="#usage">
         <img height=18 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
     <a title="Copy rule URL" target="_blank" 
        href="https://copy-to-clipboard.onrender.com/copy/https%3A%2F%2Fcodeberg.org%2Fadamlui%2Feslint-plugin-greasemonkey%2F%23meta-spacing">
@@ -161,12 +160,12 @@ If you don't care about the order of metadata fields.
 
 #### Options
 
-- `number` (default `3`) – minimum spaces after the longest key
+- `spaces` (default `3`) – minimum spaces after the longest key
 
 #### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/gray.svg" align="bottom"> Incorrect code
 
 ```diff
-  /* eslint greasemonkey/meta-spacing: ['error', 1] */
+  /* eslint greasemonkey/meta-spacing: ['error', { spaces: 1 }] */
   
   // ==UserScript==
 ! // @name My Script
@@ -178,7 +177,7 @@ If you don't care about the order of metadata fields.
 #### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/green.svg" align="bottom"> Correct code
 
 ```diff
-  /* eslint greasemonkey/meta-spacing: ['error', 1] */
+  /* eslint greasemonkey/meta-spacing: ['error', { spaces: 1 }] */
   
   // ==UserScript==
 - // @name My Script
@@ -276,11 +275,21 @@ If you intentionally repeat single-value keys.
 
 </details>
 
-<h3 id="no-invalid-grants">
+<h3 id="no-invalid-grants"><a deprecated id="valid-grants"></a>
     <code>no-invalid-grants</code>
     <a title="Included in recommended config" href="#usage">
         <img height=18 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
-    <a title="Accepts array w/ options" target="_blank" href="https://eslint.org/docs/latest/extend/custom-rules#option-defaults">
+    <a title="Optimized in tampermonkey config" href="#usage">
+        <img height=18 alt="[Tampermonkey]" src="https://img.shields.io/badge/Tampermonkey-00485b?style=flat-square" align="middle"></a>
+    <a title="Optimized in violentmonkey config" href="#usage">
+        <img height=18 alt="[Violentmonkey]" src="https://img.shields.io/badge/Violentmonkey-f01e07?style=flat-square" align="middle"></a>
+    <a title="Optimized in greasemonkey config" href="#usage">
+        <img height=18 alt="[Greasemonkey]" src="https://img.shields.io/badge/Greasemonkey-6c4d8c?style=flat-square" align="middle"></a>
+    <a title="Optimized in scriptcat config" href="#usage">
+        <img height=18 alt="[ScriptCat]" src="https://img.shields.io/badge/ScriptCat-1296dc?style=flat-square" align="middle"></a>
+    <a title="Optimized in adguard config" href="#usage">
+        <img height=18 alt="[AdGuard]" src="https://img.shields.io/badge/AdGuard-68bd72?style=flat-square" align="middle"></a>
+    <a title="Accepts array w/ options" href="#usage">
         <img height=18 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
     <a title="Copy rule URL" target="_blank" 
        href="https://copy-to-clipboard.onrender.com/copy/https%3A%2F%2Fcodeberg.org%2Fadamlui%2Feslint-plugin-greasemonkey%2F%23no-invalid-grants">
@@ -293,8 +302,8 @@ If you intentionally repeat single-value keys.
 
 #### Options
 
-- `target` (default `'all'`) – manager(s) whose grants to validate against (`'all'`, `'tampermonkey'`, `'violentmonkey'`, `'greasemonkey'`, `'scriptcat'`), as a single string or array
-- `allowedGrants` (default `[]`) – additional `@grant` values to allow beyond the built-in list (covering Tampermonkey, Violentmonkey and ScriptCat), as a single string or array
+- `target` (default `'all'`) – manager(s) whose grants to validate against (`'all'`, `'tampermonkey'`, `'violentmonkey'`, `'greasemonkey'`, `'scriptcat'`, `'adguard'`), as a single string or array
+- `allowedGrants` (default `[]`) – additional `@grant` values to allow beyond the built-in list (covering Tampermonkey, Violentmonkey, Greasemonkey, ScriptCat and AdGuard), as a single string or array
 
 #### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/gray.svg" align="bottom"> Incorrect code
 
@@ -363,7 +372,17 @@ If you don't want `@grant` validation at all. For individual uncovered grants, p
     <code>no-invalid-headers</code>
     <a title="Included in recommended config" href="#usage">
         <img height=18 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
-    <a title="Accepts array w/ options" target="_blank" href="https://eslint.org/docs/latest/extend/custom-rules#option-defaults">
+    <a title="Optimized in tampermonkey config" href="#usage">
+        <img height=18 alt="[Tampermonkey]" src="https://img.shields.io/badge/Tampermonkey-00485b?style=flat-square" align="middle"></a>
+    <a title="Optimized in violentmonkey config" href="#usage">
+        <img height=18 alt="[Violentmonkey]" src="https://img.shields.io/badge/Violentmonkey-f01e07?style=flat-square" align="middle"></a>
+    <a title="Optimized in greasemonkey config" href="#usage">
+        <img height=18 alt="[Greasemonkey]" src="https://img.shields.io/badge/Greasemonkey-6c4d8c?style=flat-square" align="middle"></a>
+    <a title="Optimized in scriptcat config" href="#usage">
+        <img height=18 alt="[ScriptCat]" src="https://img.shields.io/badge/ScriptCat-1296dc?style=flat-square" align="middle"></a>
+    <a title="Optimized in adguard config" href="#usage">
+        <img height=18 alt="[AdGuard]" src="https://img.shields.io/badge/AdGuard-68bd72?style=flat-square" align="middle"></a>
+    <a title="Accepts array w/ options" href="#usage">
         <img height=18 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
     <a title="Copy rule URL" target="_blank" 
        href="https://copy-to-clipboard.onrender.com/copy/https%3A%2F%2Fcodeberg.org%2Fadamlui%2Feslint-plugin-greasemonkey%2F%23no-invalid-headers">
@@ -376,7 +395,7 @@ If you don't want `@grant` validation at all. For individual uncovered grants, p
 
 #### Options
 
-- `target` (default `'all'`) – manager(s) whose headers to validate against (`'all'`, `'tampermonkey'`, `'violentmonkey'`, `'greasemonkey'`), as a single string or array
+- `target` (default `'all'`) – manager(s) whose headers to validate against (`'all'`, `'tampermonkey'`, `'violentmonkey'`, `'greasemonkey'`, `'scriptcat'`, `'adguard'`), as a single string or array
 - `allowedHeaders` (default `[]`) – additional headers to allow (strings or regexes), as a single value or array
 
 #### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/gray.svg" align="bottom"> Incorrect code
@@ -387,8 +406,8 @@ If you don't want `@grant` validation at all. For individual uncovered grants, p
   // ==UserScript==
   // @name          My Script
 ! // @runin         normal-tabs
+! // @customURI     https://example.com
 ! // @inject-into   page
-  // @customURL     https://example.com
   // ==/UserScript==
 ```
 
@@ -401,8 +420,9 @@ If you don't want `@grant` validation at all. For individual uncovered grants, p
   // @name          My Script
 - // @runin         normal-tabs
 + // @run-in        normal-tabs
+- // @customURI     https://example.com
++ // @customURL     https://example.com
 - // @inject-into   page
-  // @customURL     https://example.com
   // ==/UserScript==
 ```
 
@@ -440,7 +460,7 @@ If your script relies heavily on custom headers and you'd rather not maintain `a
 
 <details>
 
-<summary>Flags API calls (e.g. <code>GM_setValue</code>, <code>GM.setValue</code>, <code>CAT.agent.dom</code>) used w/o a matching <code>@grant</code> declaration.</summary>
+<summary>Flags API calls (e.g. <code>GM_setValue</code>, <code>CAT.agent.dom</code>) used w/o a matching <code>@grant</code> declaration.</summary>
 
 #### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/gray.svg" align="bottom"> Incorrect code
 
@@ -497,7 +517,7 @@ If you use APIs through aliases or wrappers that obscure the original call site.
 
 <details>
 
-<summary>Flags <code>@resource</code> references via <code>GM_getResourceText()</code> or <code>GM_getResourceURL()</code> where no matching <code>@resource</code> is declared.</summary>
+<summary>Flags <code>@resource</code> references via <code>GM_getResource<Text|URL>()</code> w/o a matching <code>@resource</code> declaration.</summary>
 
 #### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/gray.svg" align="bottom"> Incorrect code
 
@@ -660,7 +680,7 @@ If you pass resource names through variables or aliases rather than use them lit
 
 <details>
 
-<summary>Prefers <code>@match</code> over <code>@include</code> to align w/ <a target="_blank" href="https://developer.chrome.com/docs/extensions/reference/api/userScripts/"><code>chrome.userScripts</code></a> syntax.</summary>
+<summary>Prefers <code>@match</code> over <code>@include</code> for safer URL matching.</summary>
 
 #### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/gray.svg" align="bottom"> Incorrect code
 
@@ -689,7 +709,8 @@ If you rely on `@include` patterns that cannot be expressed using `@match`.
 
 #### See also
 
-- <a target="_blank" href="https://developer.chrome.com/docs/extensions/develop/concepts/match-patterns">Chrome match patterns</a>
+- <a target="_blank" href="https://www.tampermonkey.net/documentation.php?locale=en&q=include#meta:match">Tampermonkey — `@match`</a>
+- <a target="_blank" href="https://www.tampermonkey.net/documentation.php?locale=en&q=include#meta:include">Tampermonkey — `@include`</a>
 
 <div align="center">
 
@@ -701,12 +722,12 @@ If you rely on `@include` patterns that cannot be expressed using `@match`.
 
 </details>
 
-<h3 id="require-blank-line-after-meta-block">
+<h3 id="require-blank-line-after-meta-block"><a deprecated id="require-meta-newline"></a>
     <code>require-blank-line-after-meta-block</code>
     <a title="Included in recommended config" href="#usage">
         <img height=18 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
     <a title="Accepts eslint --fix" target="_blank" href="https://eslint.org/docs/latest/use/command-line-interface#--fix">
-        <img height=18 alt="[Auto-fixable]" src="https://img.shields.io/badge/Auto--fixable-e8357a?style=flat-square" align="middle"></a>
+        <img height=18 alt="[Auto-fixable]" src="https://img.shields.io/badge/Auto--fixable-3b5bdb?style=flat-square" align="middle"></a>
     <a title="Doesn't prevent bugs" href="#require-blank-line-after-meta-block">
         <img height=18 alt="[Stylistic]" src="https://img.shields.io/badge/Stylistic-af68ff?style=flat-square" align="middle"></a>
     <a title="Copy rule URL" target="_blank" 
@@ -769,7 +790,7 @@ If you don't care about visual separation between metadata and code.
     <a title="Only included in strict config" href="#usage">
         <img height=18 alt="[Strict only]" src="https://img.shields.io/badge/Strict_only-ff8c42?style=flat-square" align="middle"></a>
     <a title="Accepts eslint --fix" target="_blank" href="https://eslint.org/docs/latest/use/command-line-interface#--fix">
-        <img height=18 alt="[Auto-fixable]" src="https://img.shields.io/badge/Auto--fixable-e8357a?style=flat-square" align="middle"></a>
+        <img height=18 alt="[Auto-fixable]" src="https://img.shields.io/badge/Auto--fixable-3b5bdb?style=flat-square" align="middle"></a>
     <a title="Copy rule URL" target="_blank" 
        href="https://copy-to-clipboard.onrender.com/copy/https%3A%2F%2Fcodeberg.org%2Fadamlui%2Feslint-plugin-greasemonkey%2F%23require-homepage-pair">
         <img height=16 width=21 alt="[Copy rule URL]" src="https://api.iconify.design/mdi/content-copy.svg?color=%23cccccc" align="middle"></a>
@@ -798,7 +819,7 @@ If you don't care about visual separation between metadata and code.
 
 #### When not to use it
 
-If your target manager does not fall back to `@namespace` when a homepage key is missing (which usually produces a broken URL).
+If you don't care about ensuring homepage URL compatibility across different managers.
 
 #### Introduced in
 
@@ -807,6 +828,8 @@ If your target manager does not fall back to `@namespace` when a homepage key is
 #### See also
 
 - [`require-update-download-pair`](#require-update-download-pair)
+- <a target="_blank" href="https://www.tampermonkey.net/documentation.php?q=homepage#meta:homepage">Tampermonkey `@homepage`, `@homepageURL`, `@website`, `@source`</a>
+- <a target="_blank" href="https://docs.scriptcat.org/en/docs/dev/meta/#homepage-homepageurl-website">ScriptCat `@homepage`, `@homepageURL`, `@website`</a>
 
 <div align="center">
 
@@ -822,7 +845,7 @@ If your target manager does not fall back to `@namespace` when a homepage key is
     <code>require-matching-localized-fields</code>
     <a title="Included in recommended config" href="#usage">
         <img height=18 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
-    <a title="Accepts array w/ options" target="_blank" href="https://eslint.org/docs/latest/extend/custom-rules#option-defaults">
+    <a title="Accepts array w/ options" href="#usage">
         <img height=18 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
     <a title="Copy rule URL" target="_blank" 
        href="https://copy-to-clipboard.onrender.com/copy/https%3A%2F%2Fcodeberg.org%2Fadamlui%2Feslint-plugin-greasemonkey%2F%23require-matching-localized-fields">
@@ -891,7 +914,7 @@ If you intentionally provide localized names without descriptions (or vice versa
     <code>require-required-fields</code>
     <a title="Included in recommended config" href="#usage">
         <img height=18 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
-    <a title="Accepts array w/ options" target="_blank" href="https://eslint.org/docs/latest/extend/custom-rules#option-defaults">
+    <a title="Accepts array w/ options" href="#usage">
         <img height=18 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
     <a title="Copy rule URL" target="_blank" 
        href="https://copy-to-clipboard.onrender.com/copy/https%3A%2F%2Fcodeberg.org%2Fadamlui%2Feslint-plugin-greasemonkey%2F%23require-required-fields">
@@ -900,16 +923,17 @@ If you intentionally provide localized names without descriptions (or vice versa
 
 <details>
 
-<summary>Requires essential metadata fields (<code>@name</code>, <code>@version</code> by default) and at least one <code>@match</code> or <code>@include</code></summary>
+<summary>Requires essential metadata fields (<code>@name</code>, <code>@version</code> and at least one <code>@match</code> or <code>@include</code>).</summary>
 
 #### Options
 
 - `fields` (default `['name', 'version']`) – override the required field list
+- `requireMatchOrInclude` (default `true`) – require `@match` or `@include`
 
 #### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/gray.svg" align="bottom"> Incorrect code
 
 ```diff
-  /* eslint greasemonkey/require-required-fields: ['error', { fields: ['name', 'version', 'match'] }] */
+  /* eslint greasemonkey/require-required-fields: ['error', { fields: ['name', 'version', 'license'] }] */
   
   // ==UserScript==
   // @name      My Script
@@ -919,18 +943,19 @@ If you intentionally provide localized names without descriptions (or vice versa
 #### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/green.svg" align="bottom"> Correct code
 
 ```diff
-  /* eslint greasemonkey/require-required-fields: ['error', { fields: ['name', 'version', 'match'] }] */
+  /* eslint greasemonkey/require-required-fields: ['error', { fields: ['name', 'version', 'license'] }] */
   
   // ==UserScript==
   // @name      My Script
 + // @version   1.0.0
++ // @license   MIT
 + // @match     https://example.com/*
   // ==/UserScript==
 ```
 
 #### When not to use it
 
-If you use a subset of metadata fields that doesn't match the convention.
+If your script is a work-in-progress, or metadata is injected at build time.
 
 #### Introduced in
 
@@ -956,7 +981,7 @@ If you use a subset of metadata fields that doesn't match the convention.
     <a title="Included in recommended config" href="#usage">
         <img height=18 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
     <a title="Accepts eslint --fix" target="_blank" href="https://eslint.org/docs/latest/use/command-line-interface#--fix">
-        <img height=18 alt="[Auto-fixable]" src="https://img.shields.io/badge/Auto--fixable-e8357a?style=flat-square" align="middle"></a>
+        <img height=18 alt="[Auto-fixable]" src="https://img.shields.io/badge/Auto--fixable-3b5bdb?style=flat-square" align="middle"></a>
     <a title="Doesn't prevent bugs" href="#require-space-before-meta-key">
         <img height=18 alt="[Stylistic]" src="https://img.shields.io/badge/Stylistic-af68ff?style=flat-square" align="middle"></a>
     <a title="Copy rule URL" target="_blank" 
@@ -1014,7 +1039,7 @@ If you intentionally use a different prefix style.
     <code>require-sri-hashing</code>
     <a title="Only included in strict config" href="#usage">
         <img height=18 alt="[Strict only]" src="https://img.shields.io/badge/Strict_only-ff8c42?style=flat-square" align="middle"></a>
-    <a title="Accepts array w/ options" target="_blank" href="https://eslint.org/docs/latest/extend/custom-rules#option-defaults">
+    <a title="Accepts array w/ options" href="#usage">
         <img height=18 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
     <a title="Copy rule URL" target="_blank" 
        href="https://copy-to-clipboard.onrender.com/copy/https%3A%2F%2Fcodeberg.org%2Fadamlui%2Feslint-plugin-greasemonkey%2F%23require-sri-hashing">
@@ -1027,7 +1052,7 @@ If you intentionally use a different prefix style.
 
 #### Options
 
-- `algorithm` (default `'sha256'`) – SRI hash algorithm to enforce (`'md5'`, `'sha1'`, `'sha256'`, `'sha384'`, `'sha512'`)
+- `algorithm` (default `'sha256'`) – SRI hash algorithm(s) to enforce (`'md5'`, `'sha1'`, `'sha256'`, `'sha384'`, `'sha512'`), as a single string or array
 
 #### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/gray.svg" align="bottom"> Incorrect code
 
@@ -1067,7 +1092,8 @@ If you prefer shorter URLs, or don't support users who strictly enforce subresou
 
 - [`no-invalid-headers`](#no-invalid-headers)
 - [`require-required-fields`](#require-required-fields)
-- <a target="_blank" href="https://www.tampermonkey.net/documentation.php?q=sri">Tampermonkey Subresource Integrity</a>
+- <a target="_blank" href="https://www.tampermonkey.net/documentation.php?q=sri">Tampermonkey — Subresource Integrity</a>
+- <a target="_blank" href="https://docs.scriptcat.org/en/docs/dev/meta/#resource-integrity-verification">ScriptCat — Resource Integrity Verification</a>
 
 <div align="center">
 
@@ -1081,8 +1107,12 @@ If you prefer shorter URLs, or don't support users who strictly enforce subresou
 
 <h3 id="require-update-download-pair">
     <code>require-update-download-pair</code>
-    <a title="Only included in strict config" href="#usage">
-        <img height=18 alt="[Strict only]" src="https://img.shields.io/badge/Strict_only-ff8c42?style=flat-square" align="middle"></a>
+    <a title="Included in strict config" href="#usage">
+        <img height=18 alt="[Strict]" src="https://img.shields.io/badge/Strict-ff8c42?style=flat-square" align="middle"></a>
+    <a title="Included in tampermonkey config" href="#usage">
+        <img height=18 alt="[Tampermonkey]" src="https://img.shields.io/badge/Tampermonkey-00485b?style=flat-square" align="middle"></a>
+    <a title="Included in scriptcat config" href="#usage">
+        <img height=18 alt="[ScriptCat]" src="https://img.shields.io/badge/ScriptCat-1296dc?style=flat-square" align="middle"></a>
     <a title="Copy rule URL" target="_blank" 
        href="https://copy-to-clipboard.onrender.com/copy/https%3A%2F%2Fcodeberg.org%2Fadamlui%2Feslint-plugin-greasemonkey%2F%23require-update-download-pair">
         <img height=16 width=21 alt="[Copy rule URL]" src="https://api.iconify.design/mdi/content-copy.svg?color=%23cccccc" align="middle"></a>
@@ -1111,7 +1141,7 @@ If you prefer shorter URLs, or don't support users who strictly enforce subresou
 
 #### When not to use it
 
-If you don't target Tampermonkey (where `@updateURL` avoids re-downloading the full script on every update check).
+If you don't target Tampermonkey or ScriptCat (where `@updateURL` avoids re-downloading the full script on every update check).
 
 #### Introduced in
 
@@ -1119,8 +1149,9 @@ If you don't target Tampermonkey (where `@updateURL` avoids re-downloading the f
 
 #### See also
 
-- <a target="_blank" href="https://www.tampermonkey.net/documentation.php?q=update_url#meta:updateURL"><code>@updateURL</code></a>
 - [`require-homepage-pair`](#require-homepage-pair)
+- <a target="_blank" href="https://www.tampermonkey.net/documentation.php?q=update_url#meta:updateURL">Tampermonkey — `@updateURL`</a>
+- <a target="_blank" href="https://docs.scriptcat.org/en/docs/dev/meta/#updateurl">ScriptCat — `@updateURL`</a>
 
 <div align="center">
 
@@ -1180,9 +1211,9 @@ If you intentionally name your userscripts something other than `*.user.js`.
     <code>valid-field-values</code>
     <a title="Included in recommended config" href="#usage">
         <img height=18 alt="[Recommended]" src="https://img.shields.io/badge/Recommended-f1f20a?style=flat-square" align="middle"></a>
-    <a title="Accepts array w/ options" target="_blank" href="https://eslint.org/docs/latest/extend/custom-rules#option-defaults">
+    <a title="Accepts array w/ options" href="#usage">
         <img height=18 alt="[Configurable]" src="https://img.shields.io/badge/Configurable-black?style=flat-square" align="middle"></a>
-    <a title="Copy rule URL" target="_blank" 
+    <a title="Copy rule URL" target="_blank"
        href="https://copy-to-clipboard.onrender.com/copy/https%3A%2F%2Fcodeberg.org%2Fadamlui%2Feslint-plugin-greasemonkey%2F%23valid-field-values">
         <img height=16 width=21 alt="[Copy rule URL]" src="https://api.iconify.design/mdi/content-copy.svg?color=%23cccccc" align="middle"></a>
 </h3>
@@ -1194,6 +1225,8 @@ If you intentionally name your userscripts something other than `*.user.js`.
 #### Options
 
 - `versionType` (default `'semver'`) – version format to enforce (`'semver'`, `'date'`)
+- `allowFutureDate` (default `false`) – allow `@version` dates later than the current date
+- `timezone` (default `''`) – <a target="_blank" href="https://data.iana.org/time-zones/tzdb/zone1970.tab">IANA timezone</a> used to determine the current date (when omitted, only year/month are enforced)
 
 #### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/gray.svg" align="bottom"> Incorrect code
 
@@ -1238,6 +1271,8 @@ If you use a custom versioning scheme or URLs that aren't standard.
 
 </div>
 
+</details>
+
 ---
 
 ## Shield embed
@@ -1255,14 +1290,14 @@ If you use a custom versioning scheme or URLs that aren't standard.
 #### Markdown
 
 ```md
-[![Linted by eslint-plugin-greasemonkey](https://img.shields.io/badge/Linted_by-eslint--plugin--greasemonkey-black?logo=eslint&logoColor=white&labelColor=464646&style=for-the-badge)](https://codeberg.org/adamlui/eslint-plugin-greasemonkey/#readme)
+[![[Linted by eslint-plugin-greasemonkey]](https://img.shields.io/badge/Linted_by-eslint--plugin--greasemonkey-black?logo=eslint&logoColor=white&labelColor=464646&style=for-the-badge)](https://codeberg.org/adamlui/eslint-plugin-greasemonkey/#readme)
 ```
 
 ---
 
 ## License
 
-<a target="_blank" href="https://codeberg.org/adamlui/eslint-plugin-constructors/src/branch/main/docs/LICENSE.md">
+<a target="_blank" href="https://codeberg.org/adamlui/eslint-plugin-greasemonkey/src/branch/main/docs/LICENSE.md">
     <img height=62 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/9e820e5d51/assets/images/logos/mit-license/red-pixelated.png"></a>
 <br><br>
 
@@ -1303,7 +1338,7 @@ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLI
 <div align="center">
 
 <picture><source media="(prefers-color-scheme: dark)" srcset="https://cdn.staticdelivr.com/gl/adamlui/js-utils/6b0d399/assets/images/icons/tag/white/icon16.svg"><img height=14 src="https://cdn.staticdelivr.com/gl/adamlui/js-utils/6b0d399/assets/images/icons/tag/dark-gray/icon16.svg"></picture>
-<a target="_blank" href="https://codeberg.org/adamlui/eslint-plugin-greasemonkey/releases"><b>Latest releases</b></a> / <a target="_blank" href="https://codeberg.org/adamlui/eslint-plugin-greasemonkey/issues/new">Report a bug</a> / <a target="_blank" href="https://npmx.dev/org/adamlui">More packages by author</a> / [Back to top ↑](#top)
+<a target="_blank" href="https://codeberg.org/adamlui/eslint-plugin-greasemonkey/releases"><b>Latest releases</b></a> / <a target="_blank" href="https://codeberg.org/adamlui/eslint-plugin-greasemonkey/issues/new">Report a bug</a> / <a target="_blank" href="https://www.npmjs.com/~adamlui">More packages by author</a> / [Back to top ↑](#top)
 
 </div>
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eslint-plugin-greasemonkey",
-  "version": "1.5.2",
+  "version": "1.7.0",
   "description": "ESLint rules for Greasemonkey/Tampermonkey userscripts",
   "type": "module",
   "engines": {
@@ -63,20 +63,20 @@
     "eslint": ">=9.0.0"
   },
   "devDependencies": {
-    "@e18e/eslint-plugin": "^0.8.0",
+    "@e18e/eslint-plugin": "^0.8.1",
     "@eslint/js": "^10.0.1",
     "@eslint/json": "^2.1.0",
     "@eslint/markdown": "^8.0.3",
     "@stylistic/eslint-plugin": "^5.10.0",
-    "eslint": "^10.10.0",
-    "eslint-plugin-constructors": "^1.2.2",
+    "eslint": "^10.11.0",
+    "eslint-plugin-constructors": "^1.3.0",
     "eslint-plugin-eslint-plugin": "^7.6.2",
     "eslint-plugin-import-x": "^4.17.1",
     "eslint-plugin-n": "^18.3.0",
     "eslint-plugin-no-secrets": "^2.3.3",
     "eslint-plugin-no-unsanitized": "^4.1.5",
     "eslint-plugin-promise": "^7.3.0",
-    "eslint-plugin-regexp": "^3.3.0",
+    "eslint-plugin-regexp": "^3.3.1",
     "eslint-plugin-security": "^4.0.1",
     "globals": "^17.12.0",
     "husky": "^9.1.7",

package/src/data/apis.js

@@ -25,11 +25,30 @@ const tmAPIs = new Set([
     'GM.getTab', 'GM.getTabs', 'GM.saveTab', 'GM.webRequest'
 ])
 
+const agAPIs = new Set([
+    'GM_info', 'GM.info',
+    'GM_setValue', 'GM.setValue',
+    'GM_getValue', 'GM.getValue',
+    'GM_listValues', 'GM.listValues',
+    'GM_deleteValue', 'GM.deleteValue',
+    'GM_getResourceURL', 'GM.getResourceUrl',
+    'GM_setClipboard', 'GM.setClipboard',
+    'GM_xmlhttpRequest', 'GM.xmlHttpRequest',
+    'GM_openInTab', 'GM.openInTab',
+    'GM_notification',
+    'unsafeWindow',
+    'GM_getResourceText',
+    'GM_addStyle',
+    'GM_log',
+    'GM_addElement', 'GM.addElement'
+])
+
 export const allAPIs = new Set([...gmLegacyAPIs, ...gmModernAPIs, ...scAPIs])
 
 export function supportsAPI({ manager, api }) {
     return !allAPIs.has(api) ? false
          : api.startsWith('CAT') ? manager == 'scriptcat'
          : tmAPIs.has(api) ? manager == 'tampermonkey'
+         : manager == 'adguard' ? agAPIs.has(api)
          : true
 }

package/src/data/deprecations.js

@@ -1,6 +1,10 @@
+// Delete a line to end support
+
 export const rules = { // old: new
-    'require-meta-newline': 'require-blank-line-after-meta-block', // 2026-9-13
-    'valid-grants': 'no-invalid-grants'
+    'meta-spacing': { 'meta-spacing': { spaces: 3 }},
+    'meta-order': { 'meta-order': { order: [] }},
+    'valid-grants': 'no-invalid-grants', // 2026-9-16 announced removal @ v2
+    'require-meta-newline': 'require-blank-line-after-meta-block' // 2026-9-13 announced removal @ v2
 }
 
 export default { rules }

package/src/data/headers.js

@@ -2,21 +2,28 @@ export const universalHeaders = new Set([
     'antifeature', 'author', 'compatible', 'connect', 'contributionAmount', 'contributionURL', 'copyright',
     'defaulticon', 'description', 'downloadURL', 'exclude', 'exclude-match', 'grant', 'homepage', 'homepageURL',
     'icon', 'icon64', 'include', 'license', 'match', 'name', 'namespace', 'noframes', 'require', 'resource',
-    'run-at', 'source', 'supportURL', 'unwrap', 'updateURL', 'version', 'website'
+    'run-at', 'source', 'supportURL', 'updateURL', 'version', 'website'
 ])
 
 export const managerHeaders = new Map([
-    ['inject-into',     ['violentmonkey']],
-    ['top-level-await', ['violentmonkey']],
-    ['user-agent',      ['tampermonkey']],
-    ['run-in',          ['tampermonkey']],
+    ['unwrap',          ['tampermonkey', 'violentmonkey', 'greasemonkey', 'scriptcat']],
+    ['run-in',          ['tampermonkey', 'scriptcat']],
+    ['nocompat',        ['tampermonkey']],
     ['sandbox',         ['tampermonkey']],
+    ['user-agent',      ['tampermonkey']],
     ['webRequest',      ['tampermonkey']],
-    ['nocompat',        ['tampermonkey']]
+    ['inject-into',     ['violentmonkey', 'scriptcat']],
+    ['top-level-await', ['violentmonkey']],
+    ['background',      ['scriptcat']],
+    ['crontab',         ['scriptcat']],
+    ['definition',      ['scriptcat']],
+    ['early-start',     ['scriptcat']],
+    ['require-css',     ['scriptcat']],
+    ['storageName',     ['scriptcat']]
 ])
 
 export const localizedHeaders = ['name', 'description', 'antifeature']
-export const managers = ['tampermonkey', 'violentmonkey', 'greasemonkey']
+export const managers = ['tampermonkey', 'violentmonkey', 'greasemonkey', 'scriptcat', 'adguard']
 export const validHeaders = new Map()
 
 validHeaders.set('all', new Set([...universalHeaders, ...managerHeaders.keys()]))

package/src/index.js

@@ -22,6 +22,8 @@ import requireUpdateDownloadPair from './rules/require-update-download-pair.js'
 import requireUserJsFilename from './rules/require-user-js-filename.js'
 import validFieldValues from './rules/valid-field-values.js'
 
+import { initDeprecatedAlias } from './utils.js'
+
 const plugin = {
     rules: {
         'meta-order': metaOrder,
@@ -49,16 +51,8 @@ const plugin = {
 for (const [ruleId, rule] of Object.entries(plugin.rules))
     rule.meta.docs.url = `https://codeberg.org/adamlui/eslint-plugin-greasemonkey/#${ruleId}`
 
-for (const [oldName, newName] of Object.entries(oldRules)) {
-    const newRule = plugin.rules[newName]
-    plugin.rules[oldName] = {
-        ...newRule,
-        meta: {
-            ...newRule.meta, docs: { ...newRule.meta.docs, recommended: false },
-            deprecated: { message: `Use \`${newName}\` instead.`, replacedBy: [{ rule: { name: newName }}] }
-        }
-    }
-}
+for (const entry of Object.entries(oldRules))
+    initDeprecatedAlias(plugin, entry)
 
 plugin.configs = {
     recommended: {
@@ -87,13 +81,15 @@ plugin.configs = {
     }
 }
 
-for (const manager of ['tampermonkey', 'violentmonkey', 'greasemonkey', 'scriptcat'])
+for (const manager of ['tampermonkey', 'violentmonkey', 'greasemonkey', 'scriptcat', 'adguard'])
     plugin.configs[manager] = {
         plugins: { greasemonkey: plugin },
         rules: {
             ...plugin.configs.recommended.rules,
             'greasemonkey/no-invalid-grants': ['error', { target: manager }],
-            'greasemonkey/no-invalid-headers': ['error', { target: manager }]
+            'greasemonkey/no-invalid-headers': ['error', { target: manager }],
+            ...(['tampermonkey', 'scriptcat', 'adguard'].includes(manager) &&
+                { 'greasemonkey/require-update-download-pair': 'error' })
         }
     }
 

package/src/rules/meta-order.js

@@ -35,16 +35,21 @@ export default {
         },
         fixable: 'code',
         schema: [{
-            type: 'array',
-            items: { type: 'string' },
-            description: 'Metadata keys in preferred order; unspecified keys are ignored'
+            type: 'object',
+            properties: {
+                order: {
+                    type: 'array', items: { type: 'string' },
+                    description: 'Metadata keys in preferred order; unspecified keys are ignored'
+                }
+            },
+            additionalProperties: false
         }],
-        defaultOptions: [[]],
+        defaultOptions: [{ order: [] }],
         messages: { wrongOrder: '@{{first}} should appear before @{{second}}' }
     },
 
     create(context) {
-        const custom = context.options[0] ?? [],
+        const custom = context.options[0]?.order ?? [],
               master = custom.length ? defaultOrder.filter(key => !custom.includes(key)) : defaultOrder
         return {
             Program() {

package/src/rules/meta-spacing.js

@@ -11,13 +11,22 @@ export default {
             recommended: true
         },
         fixable: 'whitespace',
-        schema: [{ type: 'number', description: 'Minimum spaces after the longest key (default 3)' }],
-        defaultOptions: [3],
+        schema: [{
+            type: 'object',
+            properties: {
+                spaces: {
+                    type: 'number',
+                    description: 'Minimum spaces after the longest key (default 3)'
+                }
+            },
+            additionalProperties: false
+        }],
+        defaultOptions: [{ spaces: 3 }],
         messages: { misaligned: 'Metadata values should be aligned at column {{column}}' }
     },
 
     create(context) {
-        const minSpaces = context.options[0] ?? 3
+        const minSpaces = context.options[0]?.spaces ?? 3
         return {
             Program() {
                 const sourceCode = context.sourceCode,

package/src/rules/no-invalid-grants.js

@@ -1,7 +1,7 @@
 import { extractMetadata } from '../utils.js'
 import { allAPIs, supportsAPI } from '../data/apis.js'
 
-const managers = ['tampermonkey', 'violentmonkey', 'greasemonkey', 'scriptcat'],
+const managers = ['tampermonkey', 'violentmonkey', 'greasemonkey', 'scriptcat', 'adguard'],
       specialGrants = new Set(['none', 'unsafeWindow', 'window.close', 'window.focus', 'window.onurlchange']),
       allGrants = new Set([...allAPIs, ...specialGrants]),
       sortedGrants = new Map(Array.from(allGrants, grant => [grant.toLowerCase(), grant]))

package/src/rules/require-required-fields.js

@@ -15,6 +15,10 @@ export default {
                     type: 'array',
                     items: { type: 'string' },
                     description: 'Required metadata fields (default: name, version)'
+                },
+                requireMatchOrInclude: {
+                    type: 'boolean',
+                    description: 'Require a match or include metadata field (default: true)'
                 }
             },
             additionalProperties: false
@@ -25,7 +29,8 @@ export default {
 
     create(context) {
         const options = context.options[0] || {},
-              requiredFields = options.fields || ['name', 'version']
+              requiredFields = options.fields || ['name', 'version'],
+              requireMatchOrInclude = options.requireMatchOrInclude ?? true
         return {
             Program(node) {
                 const metaEntries = extractMetadata(context.sourceCode),
@@ -33,7 +38,7 @@ export default {
                 for (const field of requiredFields)
                     if (!keys.has(field))
                         context.report({ node, messageId: 'missingField', data: { field }})
-                if (!metaEntries.some(entry => ['include', 'match'].includes(entry.key)))
+                if (requireMatchOrInclude && !['include', 'match'].some(field => keys.has(field)))
                     context.report({ node, messageId: 'missingField', data: { field: 'match or include' }})
             }
         }

package/src/rules/require-sri-hashing.js

@@ -1,6 +1,7 @@
 import { extractMetadata } from '../utils.js'
 
-const re = { hashFragment: /#([^#]+)$/, sriHash: /^(sha1|sha256|sha384|sha512|md5)-([a-z0-9+/]+={0,2})$/i }
+const re = {
+    hashEntry: /^(sha1|sha256|sha384|sha512|md5)[=-]([a-z0-9+/]+={0,2})$/i, hashFragment: /#([^#]+)$/, hashSep: /[,;]/ }
 
 export default {
     meta: {
@@ -15,9 +16,14 @@ export default {
             description: 'SRI hashing options',
             properties: {
                 algorithm: {
-                    type: 'string',
-                    description: 'SRI hash algorithm to require',
-                    enum: ['md5', 'sha1', 'sha256', 'sha384', 'sha512']
+                    anyOf: [
+                        { type: 'string', enum: ['md5', 'sha1', 'sha256', 'sha384', 'sha512'] },
+                        { type: 'array',
+                            items: { type: 'string', enum: ['md5', 'sha1', 'sha256', 'sha384', 'sha512'] },
+                            minItems: 1, uniqueItems: true
+                        }
+                    ],
+                    description: 'SRI hash algorithm(s) to accept, as a single string or array (default: sha256)'
                 }
             },
             additionalProperties: false
@@ -25,31 +31,37 @@ export default {
         defaultOptions: [{ algorithm: 'sha256' }],
         messages: {
             missingHash: 'Missing SRI hash for @{{key}}.',
-            invalidHash: 'Invalid SRI hash for @{{key}}.{{detected}} Expected {{expected}}.'
+            invalidHash: 'Invalid SRI hash for @{{key}}.',
+            unsupportedAlgorithm: 'SRI hash for @{{key}} uses {{detected}}; expected {{expected}}.'
         }
     },
 
     create(context) {
-        const algorithm = (context.options[0]?.algorithm || 'sha256').toLowerCase()
+        const rawAlgorithm = context.options[0]?.algorithm ?? 'sha256',
+              algorithms = (Array.isArray(rawAlgorithm) ? rawAlgorithm : [rawAlgorithm]).map(a => a.toLowerCase()),
+              expected = algorithms.join(' or ')
         return {
             'Program:exit'() {
                 for (const entry of extractMetadata(context.sourceCode)) {
                     if (entry.key != 'require' && entry.key != 'resource') continue
-                    const hash = entry.value.trim().match(re.hashFragment)?.[1]
-                    if (!hash) {
+                    const fragment = entry.value.trim().match(re.hashFragment)?.[1]
+                    if (!fragment) {
                         context.report({ node: entry.comment, messageId: 'missingHash', data: { key: entry.key } })
                         continue
                     }
-                    const match = hash.match(re.sriHash)
-                    if (!match || match[1].toLowerCase() != algorithm)
+                    const hashes = fragment.split(re.hashSep).map(hash => hash.trim()).filter(Boolean),
+                          parsed = hashes.map(hash => hash.match(re.hashEntry)).filter(Boolean)
+                    if (!parsed.length) {
+                        context.report({ node: entry.comment, messageId: 'invalidHash', data: { key: entry.key } })
+                        continue
+                    }
+                    if (!parsed.some(match => algorithms.includes(match[1].toLowerCase()))) {
+                        const detected = parsed.map(match => match[1].toLowerCase()).join(', ')
                         context.report({
-                            node: entry.comment, messageId: 'invalidHash',
-                            data: {
-                                key: entry.key,
-                                detected: match ? ` Detected ${match[1].toLowerCase()}.` : '',
-                                expected: algorithm
-                            }
+                            node: entry.comment, messageId: 'unsupportedAlgorithm',
+                            data: { key: entry.key, detected, expected }
                         })
+                    }
                 }
             }
         }

package/src/rules/valid-field-values.js

@@ -28,6 +28,14 @@ export default {
                     type: 'array',
                     items: { type: 'string' },
                     description: 'Allowed @grant values to check against; if empty, no grant validation'
+                },
+                allowFutureDate: {
+                    type: 'boolean',
+                    description: 'Allow @version dates later than the current date (default: false)'
+                },
+                timezone: {
+                    type: 'string',
+                    description: 'IANA timezone for determining the current date (when omitted, only year and month are checked)'
                 }
             },
             additionalProperties: false
@@ -35,6 +43,7 @@ export default {
         defaultOptions: [{}],
         messages: {
             invalidVersion: 'Invalid @version: must be a valid {{versionType}} (expected format: {{example}})',
+            futureVersion: 'Invalid @version: date cannot be in the future',
             invalidURL: 'Invalid URL for @{{field}}',
             invalidGrant: 'Unknown @grant: "{{grant}}"'
         }
@@ -44,7 +53,15 @@ export default {
         const options = context.options[0] || {},
               versionType = options.versionType || 'semver',
               allowedGrants = options.allowedGrants || [],
+              allowFutureDate = options.allowFutureDate ?? false,
+              timezone = options.timezone,
               example = versionType == 'semver' ? '1.2.3' : 'YYYY.M.D or YYYY.MM.DD'
+        const now = timezone
+            ? Object.fromEntries(new Intl.DateTimeFormat('en', {
+                timeZone: timezone, year: 'numeric', month: 'numeric', day: 'numeric'
+            }).formatToParts().filter(({ type }) => ['year', 'month', 'day'].includes(type))
+                .map(({ type, value }) => [type, Number(value)]))
+            : { year: new Date().getUTCFullYear(), month: new Date().getUTCMonth() +1 }
         return {
             Program() {
                 const metaEntries = extractMetadata(context.sourceCode)
@@ -66,9 +83,15 @@ export default {
                         const isValid = versionType == 'semver' ? re.semVer.test(entry.value)
                                       : versionType == 'date' ? re.dateVer.test(entry.value)
                                       : false
+                        const [year, month, day] = versionType == 'date' ? entry.value.split('.').map(Number) : []
                         if (!isValid)
                             context.report({
                                 node: entry.comment, messageId: 'invalidVersion', data: { versionType, example }})
+                        else if (versionType == 'date' && !allowFutureDate && (
+                            year > now.year || year == now.year && month > now.month
+                                || timezone && year == now.year && month == now.month && day > now.day
+                        ))
+                            context.report({ node: entry.comment, messageId: 'futureVersion' })
                     }
                 }
             }

package/src/utils.js

@@ -1,3 +1,5 @@
+const re = { whitespace: /\s/ }
+
 export function extractMetadata(sourceCode) {
     const comments = sourceCode.getAllComments(),
           metaEntries = []
@@ -7,17 +9,90 @@ export function extractMetadata(sourceCode) {
         if (!inMetaBlock && text == '==UserScript==') inMetaBlock = true
         else if (inMetaBlock && text == '==/UserScript==') break
         else if (inMetaBlock && text.startsWith('@')) { // capture entry
-            const spaceIdx = text.indexOf(' ')
-            if (spaceIdx > 1) { // need space after key
-                const key = text.slice(1, spaceIdx).trim(),
-                      value = text.slice(spaceIdx +1).trim()
-                metaEntries.push({ key, value, comment, line: comment.loc.start.line })
-            }
+            const spaceIdx = text.search(re.whitespace),
+                  key = ( spaceIdx == -1 ? text.slice(1) : text.slice(1, spaceIdx) ).trim(),
+                  value = spaceIdx == -1 ? '' : text.slice(spaceIdx +1).trim()
+            if (key) metaEntries.push({ key, value, comment, line: comment.loc.start.line })
         }
     }
     return metaEntries
 }
 
+export function initDeprecatedAlias(plugin, [oldName, alias]) { /* eslint-disable security/detect-object-injection */
+    const routes = typeof alias == 'string' ? { [alias]: null } // 'old-rule': 'new-rule'
+        : Array.isArray(alias) ? Object.fromEntries(alias.map(entry =>
+              typeof entry == 'string' ? [entry, null] // ['new-rule-1', 'new-rule-2']
+            : Object.entries(entry)[0])) // [{ 'new-rule': { 'old-opt': 'new-opt' }}]
+        : alias // { 'new-rule': null | { 'new-opt': default } | { 'old-val': 'new-val' } | { ..., 'new-opt': default }}
+    const targetNames = Object.keys(routes),
+          isRename = !targetNames.includes(oldName),
+          originals = Object.fromEntries(targetNames.map(name => [name, plugin.rules[name]])),
+          source = originals[oldName] ?? originals[targetNames[0]]
+    plugin.rules[oldName] = {
+        meta: {
+            ...source.meta,
+            defaultOptions: [],
+            schema: [{ type: ['object', 'array', 'string', 'number', 'boolean', 'null'] }],
+            docs: { ...source.meta.docs, recommended: isRename ? false : source.meta.docs.recommended },
+            messages: {
+                ...source.meta.messages,
+                deprecatedOption: `'{{old}}' is deprecated. Use '{{new}}' instead.`
+            },
+            ...(isRename ? { deprecated: {
+                message: `Use ${targetNames.map(name => `\`${name}\``).join(', ')} instead.`,
+                replacedBy: targetNames.map(name => ({ rule: { name }}))
+            }} : {})
+        },
+        create(context) {
+            const opts = context.options[0],
+                  isObj = opts?.constructor === Object
+            return Object.assign({}, ...Object.entries(routes).map(([targetName, mapping]) => {
+                let newOpts = opts, deprecation
+                if (mapping) {
+                    const entries = Object.entries(mapping),
+                          namedRemap = entries.every(([, val]) => typeof val == 'string'),
+                          wrapKey = namedRemap && entries.length > 1 ? entries.at(-1)[0] : null,
+                          valMap = wrapKey ? Object.fromEntries(entries.slice(0, -1)) : mapping
+                    if (namedRemap) {
+                        if (typeof opts == 'string') { // bare old val → remap, optionally wrapped
+                            if (valMap[opts]) deprecation = { old: opts, new: valMap[opts] }
+                            const remapped = valMap[opts] ?? opts
+                            newOpts = wrapKey ? { [wrapKey]: remapped } : remapped
+                        } else if (wrapKey) { // object opts (or defaults) → remap inner val, warn if deprecated
+                            const raw = isObj ? (opts[wrapKey] ?? mapping[wrapKey]) : mapping[wrapKey],
+                                  remapped = valMap[raw]
+                            if (remapped) deprecation = { old: raw, new: remapped }
+                            newOpts = { [wrapKey]: remapped ?? raw }
+                        } else { // object opts → old key → new key
+                            newOpts = { ...opts }
+                            for (const [oldKey, newKey] of entries)
+                                if (opts?.[oldKey] !== undefined) {
+                                    newOpts[newKey] = opts[oldKey] ; delete newOpts[oldKey] }
+                        }
+                    } else { // { new-opt: default } — positional wrap
+                        const [newKey, defaultValue] = entries[0]
+                        if (opts !== undefined && !isObj)
+                            deprecation = { old: JSON.stringify(opts), new: `{ ${newKey}: ${JSON.stringify(opts)} }` }
+                        newOpts = { [newKey]: isObj ? (opts[newKey] ?? defaultValue) : (opts ?? defaultValue) }
+                    }
+                }
+                const aliasContext = Object.create(context)
+                Object.defineProperty(aliasContext, 'options',
+                    { value: [newOpts], writable: true, configurable: true, enumerable: true })
+                const visitors = { ...originals[targetName].create(aliasContext) }
+                if (deprecation) {
+                    const ruleProgram = visitors.Program
+                    visitors.Program = function(node) {
+                        context.report({ node, messageId: 'deprecatedOption', data: deprecation })
+                        if (ruleProgram) ruleProgram.call(this, node)
+                    }
+                }
+                return visitors
+            }))
+        }
+    }
+} /* eslint-enable security/detect-object-injection */
+
 export function resolveTemplate(node) {
     if (node.type == 'ConditionalExpression') {
         const branches = [node.consequent, node.alternate].map(resolveTemplate)