eslint-plugin-import-next 2.3.5 → 2.3.7

package/src/index.js

@@ -146,7 +146,7 @@ exports.rules = {
 exports.plugin = {
     meta: {
         name: 'eslint-plugin-import-next',
-        version: '2.0.0',
+        version: '2.3.7',
     },
     rules: exports.rules,
 };
@@ -154,6 +154,18 @@ exports.plugin = {
  * Preset configurations for common use cases
  */
 exports.configs = {
+    /**
+     * Flagship preset — exactly the rule from this plugin that appears in the
+     * ecosystem-wide flagship list (`.agent/flagship-rules.md`). Use this when
+     * you want the highest-signal subset shippable in CI gates without the
+     * noise of `recommended`.
+     */
+    flagship: {
+        plugins: { 'import-next': exports.plugin },
+        rules: {
+            'import-next/no-cycle': 'error',
+        },
+    },
     /**
      * Recommended configuration for most projects
      *

package/src/oxlint.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Copyright (c) 2025 Ofri Peretz
+ * Licensed under the MIT License. Use of this source code is governed by the
+ * MIT license that can be found in the LICENSE file.
+ */
+/**
+ * oxlint sub-export.
+ *
+ * Consumers wire oxlint to this entry via:
+ *   { "jsPlugins": ["eslint-plugin-import-next/oxlint"] }
+ *
+ * oxlint's JS plugin loader does `require('eslint-plugin-import-next/oxlint')` and reads
+ * `.rules` off the result. The compiled output of `export = plugin` is
+ * `module.exports = plugin`, which gives oxlint the plugin object directly
+ * (`{ meta, rules }`) — no wrapper, no `.default` indirection.
+ *
+ * Generated by scripts/generate-oxlint-shims.mjs. Do not edit by hand.
+ */
+import { plugin } from './index';
+export = plugin;

package/src/oxlint.js

@@ -0,0 +1,21 @@
+"use strict";
+/**
+ * Copyright (c) 2025 Ofri Peretz
+ * Licensed under the MIT License. Use of this source code is governed by the
+ * MIT license that can be found in the LICENSE file.
+ */
+/**
+ * oxlint sub-export.
+ *
+ * Consumers wire oxlint to this entry via:
+ *   { "jsPlugins": ["eslint-plugin-import-next/oxlint"] }
+ *
+ * oxlint's JS plugin loader does `require('eslint-plugin-import-next/oxlint')` and reads
+ * `.rules` off the result. The compiled output of `export = plugin` is
+ * `module.exports = plugin`, which gives oxlint the plugin object directly
+ * (`{ meta, rules }`) — no wrapper, no `.default` indirection.
+ *
+ * Generated by scripts/generate-oxlint-shims.mjs. Do not edit by hand.
+ */
+const index_1 = require("./index");
+module.exports = index_1.plugin;

package/src/rules/consistent-type-specifier-style.js

@@ -12,7 +12,10 @@ exports.consistentTypeSpecifierStyle = (0, eslint_devkit_1.createRule)({
     meta: {
         type: 'suggestion',
         docs: {
+            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-import-next/docs/rules/consistent-type-specifier-style.md',
             description: 'Enforce or ban the use of inline type-only markers for named imports',
+            cwe: 'CWE-1078',
+            cvss: 2.5,
         },
         fixable: 'code',
         messages: {
@@ -46,10 +49,11 @@ exports.consistentTypeSpecifierStyle = (0, eslint_devkit_1.createRule)({
     defaultOptions: ['prefer-inline'],
     create(context) {
         const style = context.options[0] || 'prefer-inline';
-        const sourceCode = context.getSourceCode();
+        const sourceCode = context.sourceCode;
         /**
          * Get the text for a specifier, handling aliasing
          */
+        // oxlint-disable-next-line consistent-function-scoping
         function getSpecifierText(spec) {
             const imported = spec.imported.type === 'Identifier'
                 ? spec.imported.name

package/src/rules/default.js

@@ -15,6 +15,7 @@ exports.defaultRule = (0, eslint_devkit_1.createRule)({
     meta: {
         type: 'problem',
         docs: {
+            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-import-next/docs/rules/default.md',
             description: 'Ensure a default export is present, given a default import',
         },
         messages: {

package/src/rules/dynamic-import-chunkname.js

@@ -12,7 +12,10 @@ exports.dynamicImportChunkname = (0, eslint_devkit_1.createRule)({
     meta: {
         type: 'suggestion',
         docs: {
+            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-import-next/docs/rules/dynamic-import-chunkname.md',
             description: 'Enforce a leading comment with the webpackChunkName for dynamic imports',
+            cwe: 'CWE-1078',
+            cvss: 2.5,
         },
         hasSuggestions: true,
         messages: {
@@ -62,7 +65,7 @@ exports.dynamicImportChunkname = (0, eslint_devkit_1.createRule)({
         const options = context.options[0] || {};
         const { allowEmpty = false, webpackChunknameFormat = '[a-zA-Z0-9-_/.]+' } = options;
         const chunkNamePattern = new RegExp(`^${webpackChunknameFormat}$`);
-        const sourceCode = context.getSourceCode();
+        const sourceCode = context.sourceCode;
         function checkChunkName(node) {
             // Get leading comments
             const comments = sourceCode.getCommentsBefore(node.source);

package/src/rules/enforce-dependency-direction.js

@@ -48,6 +48,7 @@ exports.enforceDependencyDirection = (0, eslint_devkit_2.createRule)({
     meta: {
         type: 'problem',
         docs: {
+            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-import-next/docs/rules/enforce-dependency-direction.md',
             description: 'Ensures dependencies flow in the correct architectural direction',
         },
         messages: {
@@ -129,7 +130,7 @@ exports.enforceDependencyDirection = (0, eslint_devkit_2.createRule)({
         },
     ],
     create(context, [options = {}]) {
-        const filename = context.getFilename();
+        const filename = context.filename;
         const { layers: providedLayers, layerPatterns: providedLayerPatterns, allowSameLayer = true, } = options || {};
         // Use provided layers or defaults
         const layers = providedLayers || [

package/src/rules/enforce-import-order.js

@@ -30,6 +30,7 @@ exports.enforceImportOrder = (0, eslint_devkit_1.createRule)({
     meta: {
         type: 'suggestion',
         docs: {
+            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-import-next/docs/rules/enforce-import-order.md',
             description: 'Enforces a specific order for import statements',
         },
         fixable: 'code',
@@ -121,7 +122,7 @@ exports.enforceImportOrder = (0, eslint_devkit_1.createRule)({
                     defaultOptions.alphabetize.caseInsensitive,
             },
         };
-        const sourceCode = context.getSourceCode();
+        const sourceCode = context.sourceCode;
         const imports = [];
         function getImportType(node) {
             const source = node.source.value;
@@ -237,7 +238,8 @@ exports.enforceImportOrder = (0, eslint_devkit_1.createRule)({
                     }
                 }
                 const originalImports = [...imports];
-                const sortedImports = [...imports].sort((a, b) => {
+                // oxlint-disable-next-line unicorn/no-array-sort
+                const sortedImports = Array.from(imports).sort((a, b) => {
                     const typeA = getImportType(a);
                     const typeB = getImportType(b);
                     const rankA = getGroupRank(typeA);

package/src/rules/enforce-team-boundaries.js

@@ -7,18 +7,35 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.enforceTeamBoundaries = void 0;
 const eslint_devkit_1 = require("@interlace/eslint-devkit");
+/**
+ * Translate a user-supplied glob (`foo/**\/*.ts`) into a RegExp.
+ *
+ * Important: regex metacharacters in the input must be escaped BEFORE the
+ * glob tokens are translated. Without escaping, a pattern like `lib\foo` is
+ * interpreted as `\f` (form feed) and `lib.foo` matches `libXfoo` rather
+ * than the literal dot the user wrote. CodeQL flags the un-escaped backslash
+ * specifically (`js/incomplete-sanitization`).
+ *
+ * Algorithm: escape all regex metas (including `\`), then unescape and
+ * translate just the glob tokens `**` and `*` back to their regex form.
+ */
+function globToRegex(pattern) {
+    // Escape regex metacharacters INCLUDING `*`, so the subsequent replaces
+    // can find the now-escaped `\*\*` / `\*` and translate them back to their
+    // glob meanings. Without escaping `*`, the `**` in `src/platform/**`
+    // reaches `new RegExp()` raw and throws "Nothing to repeat".
+    const escaped = pattern.replace(/[.+?^${}()|[\]\\*]/g, '\\$&');
+    return new RegExp(escaped
+        .replace(/\\\*\\\*/g, '.*')
+        .replace(/\\\*/g, '[^/]*'));
+}
 /**
  * Determine which team owns this file based on path patterns
  */
 function getFileTeam(filePath, teams) {
     for (const team of teams) {
         for (const pattern of team.paths) {
-            // Support glob patterns (simplified)
-            const regex = new RegExp(pattern
-                .replace(/\*\*/g, '.*')
-                .replace(/\*/g, '[^/]*')
-                .replace(/\//g, '\\/'));
-            if (regex.test(filePath)) {
+            if (globToRegex(pattern).test(filePath)) {
                 return team;
             }
         }
@@ -31,11 +48,7 @@ function getFileTeam(filePath, teams) {
 function getImportTeam(importPath, teams) {
     for (const team of teams) {
         for (const pattern of team.paths) {
-            const regex = new RegExp(pattern
-                .replace(/\*\*/g, '.*')
-                .replace(/\*/g, '[^/]*')
-                .replace(/\//g, '\\/'));
-            if (regex.test(importPath)) {
+            if (globToRegex(pattern).test(importPath)) {
                 return team;
             }
         }
@@ -77,11 +90,7 @@ function isExternalImport(importPath) {
  */
 function isSharedPath(importPath, sharedPaths) {
     for (const shared of sharedPaths) {
-        const regex = new RegExp(shared
-            .replace(/\*\*/g, '.*')
-            .replace(/\*/g, '[^/]*')
-            .replace(/\//g, '\\/'));
-        if (regex.test(importPath)) {
+        if (globToRegex(shared).test(importPath)) {
             return true;
         }
     }
@@ -92,6 +101,7 @@ exports.enforceTeamBoundaries = (0, eslint_devkit_1.createRule)({
     meta: {
         type: 'problem',
         docs: {
+            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-import-next/docs/rules/enforce-team-boundaries.md',
             description: 'Prevent unauthorized cross-team imports in large codebases',
         },
         messages: {
@@ -154,7 +164,7 @@ exports.enforceTeamBoundaries = (0, eslint_devkit_1.createRule)({
     create(context, [options]) {
         const { teams, sharedPaths = [], allowExternalPackages = true } = options;
         // Get the file's team ownership
-        const filename = context.filename || context.getFilename();
+        const filename = context.filename;
         const sourceTeam = getFileTeam(filename, teams);
         // If file doesn't belong to any team, skip checking
         if (!sourceTeam) {

package/src/rules/export.js

@@ -12,7 +12,10 @@ exports.exportRule = (0, eslint_devkit_1.createRule)({
     meta: {
         type: 'problem',
         docs: {
+            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-import-next/docs/rules/export.md',
             description: 'Forbid any invalid exports, i.e. re-export of the same name',
+            cwe: 'CWE-694',
+            cvss: 7.5,
         },
         messages: {
             duplicateExport: (0, eslint_devkit_1.formatLLMMessage)({

package/src/rules/exports-last.js

@@ -12,7 +12,10 @@ exports.exportsLast = (0, eslint_devkit_1.createRule)({
     meta: {
         type: 'suggestion',
         docs: {
+            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-import-next/docs/rules/exports-last.md',
             description: 'Ensure all exports appear after other statements',
+            cwe: 'CWE-1078',
+            cvss: 2.5,
         },
         messages: {
             exportNotLast: (0, eslint_devkit_1.formatLLMMessage)({

package/src/rules/extensions.js

@@ -15,6 +15,7 @@ exports.extensions = (0, eslint_devkit_1.createRule)({
     meta: {
         type: 'suggestion',
         docs: {
+            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-import-next/docs/rules/extensions.md',
             description: 'Ensure consistent use of file extensions in imports',
         },
         fixable: 'code',

package/src/rules/first.js

@@ -13,9 +13,9 @@ exports.first = (0, eslint_devkit_1.createRule)({
     meta: {
         type: 'suggestion',
         docs: {
+            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-import-next/docs/rules/first.md',
             description: 'Ensure all imports appear before other statements',
         },
-        fixable: 'code',
         messages: {
             first: (0, eslint_devkit_2.formatLLMMessage)({
                 icon: eslint_devkit_2.MessageIcons.ARCHITECTURE,
@@ -48,6 +48,7 @@ exports.first = (0, eslint_devkit_1.createRule)({
                 }
             },
         };
+        // oxlint-disable-next-line consistent-function-scoping
         function isDirective(node) {
             return (node.type === 'ExpressionStatement' &&
                 node.expression.type === 'Literal' &&

package/src/rules/group-exports.js

@@ -12,7 +12,10 @@ exports.groupExports = (0, eslint_devkit_1.createRule)({
     meta: {
         type: 'suggestion',
         docs: {
+            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-import-next/docs/rules/group-exports.md',
             description: 'Prefer named exports to be grouped together in a single export declaration',
+            cwe: 'CWE-1078',
+            cvss: 2.5,
         },
         messages: {
             groupExports: (0, eslint_devkit_1.formatLLMMessage)({

package/src/rules/max-dependencies.js

@@ -13,6 +13,7 @@ exports.maxDependencies = (0, eslint_devkit_1.createRule)({
     meta: {
         type: 'suggestion',
         docs: {
+            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-import-next/docs/rules/max-dependencies.md',
             description: 'Enforce the maximum number of dependencies a module can have',
         },
         hasSuggestions: false,
@@ -87,7 +88,7 @@ exports.maxDependencies = (0, eslint_devkit_1.createRule)({
     create(context) {
         const [options] = context.options;
         const { max = 10, ignoreTypeImports = true, ignoreImports = [], ignoreFiles = [], } = options || {};
-        const filename = context.getFilename();
+        const filename = context.filename;
         if (!filename) {
             return {};
         }

package/src/rules/named.js

@@ -15,9 +15,9 @@ exports.named = (0, eslint_devkit_1.createRule)({
     meta: {
         type: 'problem',
         docs: {
+            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-import-next/docs/rules/named.md',
             description: 'Ensure named imports correspond to a named export in the remote file',
         },
-        fixable: 'code',
         messages: {
             named: (0, eslint_devkit_2.formatLLMMessage)({
                 icon: eslint_devkit_2.MessageIcons.SECURITY, // Using SECURITY as incorrect imports can be dangerous or break build

package/src/rules/namespace.js

@@ -15,6 +15,7 @@ exports.namespace = (0, eslint_devkit_1.createRule)({
     meta: {
         type: 'problem',
         docs: {
+            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-import-next/docs/rules/namespace.md',
             description: 'Ensure imported namespaces contain dereferenced properties as they are dereferenced',
         },
         messages: {

package/src/rules/newline-after-import.js

@@ -13,6 +13,7 @@ exports.newlineAfterImport = (0, eslint_devkit_1.createRule)({
     meta: {
         type: 'layout',
         docs: {
+            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-import-next/docs/rules/newline-after-import.md',
             description: 'Enforce a newline after import statements',
         },
         fixable: 'whitespace',

package/src/rules/no-absolute-path.js

@@ -14,7 +14,10 @@ exports.noAbsolutePath = (0, eslint_devkit_1.createRule)({
     meta: {
         type: 'suggestion',
         docs: {
+            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-import-next/docs/rules/no-absolute-path.md',
             description: 'Forbid import of modules using absolute paths',
+            cwe: 'CWE-426',
+            cvss: 5,
         },
         fixable: 'code',
         messages: {

package/src/rules/no-amd.js

@@ -13,6 +13,7 @@ exports.noAmd = (0, eslint_devkit_1.createRule)({
     meta: {
         type: 'problem',
         docs: {
+            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-import-next/docs/rules/no-amd.md',
             description: 'Prevents AMD require/define calls',
         },
         hasSuggestions: false,
@@ -58,7 +59,7 @@ exports.noAmd = (0, eslint_devkit_1.createRule)({
         const { allow = [],
         // suggestES6 = true // Reserved for future use when hasSuggestions is enabled
          } = options || {};
-        const filename = context.getFilename();
+        const filename = context.filename;
         function shouldAllow() {
             // Check if the call is in an allowed pattern
             return allow.some((pattern) => {

package/src/rules/no-anonymous-default-export.js

@@ -13,6 +13,7 @@ exports.noAnonymousDefaultExport = (0, eslint_devkit_1.createRule)({
     meta: {
         type: 'suggestion',
         docs: {
+            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-import-next/docs/rules/no-anonymous-default-export.md',
             description: 'Forbid anonymous values as default exports',
         },
         messages: {
@@ -114,6 +115,7 @@ exports.noAnonymousDefaultExport = (0, eslint_devkit_1.createRule)({
                     return true;
             }
         }
+        // oxlint-disable-next-line consistent-function-scoping
         function getSuggestionText(node) {
             const declaration = node.declaration;
             switch (declaration.type) {

package/src/rules/no-barrel-file.js

@@ -74,6 +74,7 @@ exports.noBarrelFile = (0, eslint_devkit_1.createRule)({
     meta: {
         type: 'problem',
         docs: {
+            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-import-next/docs/rules/no-barrel-file.md',
             description: 'Disallow barrel files that harm build performance and tree-shaking efficiency',
         },
         hasSuggestions: true,
@@ -148,7 +149,7 @@ exports.noBarrelFile = (0, eslint_devkit_1.createRule)({
     ],
     create(context, [options = {}]) {
         const { threshold = 3, allowedPaths = [], barrelPatterns = DEFAULT_BARREL_PATTERNS, allowWithLocalExports = false, reexportRatio = 0.8, } = options || {};
-        const filename = context.filename || context.getFilename();
+        const filename = context.filename;
         // Check if file matches barrel patterns
         if (!matchesPattern(filename, barrelPatterns)) {
             return {};

package/src/rules/no-barrel-import.js

@@ -45,9 +45,9 @@ exports.noBarrelImport = (0, eslint_devkit_1.createRule)({
     meta: {
         type: 'suggestion',
         docs: {
+            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-import-next/docs/rules/no-barrel-import.md',
             description: 'Disallow imports from barrel files to improve build performance and tree-shaking',
         },
-        fixable: 'code',
         hasSuggestions: true,
         messages: {
             barrelImportDetected: (0, eslint_devkit_1.formatLLMMessage)({

package/src/rules/no-commonjs.js

@@ -13,6 +13,7 @@ exports.noCommonjs = (0, eslint_devkit_1.createRule)({
     meta: {
         type: 'problem',
         docs: {
+            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-import-next/docs/rules/no-commonjs.md',
             description: 'Prevents CommonJS require/module.exports',
         },
         hasSuggestions: true,
@@ -98,7 +99,7 @@ exports.noCommonjs = (0, eslint_devkit_1.createRule)({
     create(context) {
         const [options] = context.options;
         const { allowRequire = false, allowModuleExports = false, allowExports = false, allowInFiles = [], suggestES6 = true, } = options || {};
-        const filename = context.getFilename();
+        const filename = context.filename;
         function shouldAllow() {
             if (!filename) {
                 return false;

package/src/rules/no-cross-domain-imports.js

@@ -130,6 +130,7 @@ exports.noCrossDomainImports = (0, eslint_devkit_2.createRule)({
     meta: {
         type: 'problem',
         docs: {
+            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-import-next/docs/rules/no-cross-domain-imports.md',
             description: 'Prevents imports across domain/feature boundaries',
         },
         messages: {
@@ -221,7 +222,7 @@ exports.noCrossDomainImports = (0, eslint_devkit_2.createRule)({
         },
     ],
     create(context, [options = {}]) {
-        const filename = context.getFilename();
+        const filename = context.filename;
         /**
          * Check import declarations
          */

package/src/rules/no-cycle.d.ts

@@ -50,7 +50,7 @@ export interface IncrementalOptions {
     maxCacheAge?: number;
 }
 export interface Options {
-    /** Maximum allowed import depth. Default: 5 */
+    /** Maximum allowed import depth. Default: Infinity (unlimited) */
     maxDepth?: number;
     /** Patterns to ignore when checking for cycles (glob patterns) */
     ignorePatterns?: string[];