eslint-plugin-package-json 1.8.1 → 1.9.0

package/README.md

@@ -50,6 +50,7 @@ See [Getting Started](https://eslint-plugin-package-json.dev/getting-started) fo
 | [repository-shorthand](https://eslint-plugin-package-json.dev/rules/repository-shorthand)                                       | Enforce either object or shorthand declaration for repository.                                                                                                                               | ✅  | 🔧  |     |
 | [require-attribution](https://eslint-plugin-package-json.dev/rules/require-attribution)                                         | Ensures that proper attribution is included, requiring that either `author` or `contributors` is defined, and that if `contributors` is present, it should include at least one contributor. | ✅  |     | 💡  |
 | [restrict-dependency-ranges](https://eslint-plugin-package-json.dev/rules/restrict-dependency-ranges)                           | Restricts the range of dependencies to allow or disallow specific types of ranges.                                                                                                           |     |     | 💡  |
+| [restrict-dist-tags](https://eslint-plugin-package-json.dev/rules/restrict-dist-tags)                                           | Restricts dependency dist-tags to an allowed list and selected dependency types.                                                                                                             |     |     |     |
 | [restrict-private-properties](https://eslint-plugin-package-json.dev/rules/restrict-private-properties)                         | Disallows unnecessary properties in private packages.                                                                                                                                        |     | 🔧  | 💡  |
 | [restrict-top-level-properties](https://eslint-plugin-package-json.dev/rules/restrict-top-level-properties)                     | Disallows specified top-level properties in package.json.                                                                                                                                    |     |     | 💡  |
 | [scripts-name-casing](https://eslint-plugin-package-json.dev/rules/scripts-name-casing)                                         | Enforce that names for `scripts` are in kebab case (optionally separated by colons).                                                                                                         | 🎨  |     | 💡  |
@@ -209,7 +210,7 @@ Thanks! 🍻
     </tr>
     <tr>
       <td align="center" valign="top" width="14.28%"><a href="http://heggria.site"><img src="https://avatars.githubusercontent.com/u/34475327?v=4?s=100" width="100px;" alt="Heggria"/><br /><sub><b>Heggria</b></sub></a><br /><a href="#ideas-heggria" title="Ideas, Planning, & Feedback">🤔</a></td>
-      <td align="center" valign="top" width="14.28%"><a href="https://hirok.io"><img src="https://avatars.githubusercontent.com/u/1075694?v=4?s=100" width="100px;" alt="Hiroki Osame"/><br /><sub><b>Hiroki Osame</b></sub></a><br /><a href="#ideas-privatenumber" title="Ideas, Planning, & Feedback">🤔</a> <a href="https://github.com/michaelfaith/eslint-plugin-package-json/commits?author=privatenumber" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://hirok.io"><img src="https://avatars.githubusercontent.com/u/1075694?v=4?s=100" width="100px;" alt="Hiroki Osame"/><br /><sub><b>Hiroki Osame</b></sub></a><br /><a href="#ideas-privatenumber" title="Ideas, Planning, & Feedback">🤔</a> <a href="https://github.com/michaelfaith/eslint-plugin-package-json/commits?author=privatenumber" title="Code">💻</a> <a href="https://github.com/michaelfaith/eslint-plugin-package-json/issues?q=author%3Aprivatenumber" title="Bug reports">🐛</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://vanyauhalin.me/"><img src="https://avatars.githubusercontent.com/u/56481109?v=4?s=100" width="100px;" alt="Ivan Uhalin"/><br /><sub><b>Ivan Uhalin</b></sub></a><br /><a href="#ideas-vanyauhalin" title="Ideas, Planning, & Feedback">🤔</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/Zamiell"><img src="https://avatars.githubusercontent.com/u/5511220?v=4?s=100" width="100px;" alt="James"/><br /><sub><b>James</b></sub></a><br /><a href="https://github.com/michaelfaith/eslint-plugin-package-json/commits?author=Zamiell" title="Code">💻</a> <a href="#ideas-Zamiell" title="Ideas, Planning, & Feedback">🤔</a> <a href="https://github.com/michaelfaith/eslint-plugin-package-json/issues?q=author%3AZamiell" title="Bug reports">🐛</a> <a href="https://github.com/michaelfaith/eslint-plugin-package-json/commits?author=Zamiell" title="Documentation">📖</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/zetlen"><img src="https://avatars.githubusercontent.com/u/1643758?v=4?s=100" width="100px;" alt="James Zetlen"/><br /><sub><b>James Zetlen</b></sub></a><br /><a href="https://github.com/michaelfaith/eslint-plugin-package-json/commits?author=zetlen" title="Code">💻</a> <a href="https://github.com/michaelfaith/eslint-plugin-package-json/issues?q=author%3Azetlen" title="Bug reports">🐛</a> <a href="https://github.com/michaelfaith/eslint-plugin-package-json/commits?author=zetlen" title="Documentation">📖</a> <a href="#infra-zetlen" title="Infrastructure (Hosting, Build-Tools, etc)">🚇</a> <a href="#maintenance-zetlen" title="Maintenance">🚧</a> <a href="#tool-zetlen" title="Tools">🔧</a></td>

package/dist/experimental/index.mjs

@@ -1,4 +1,4 @@
-import { t as plugin$1 } from "../plugin-DlF-r5D9.mjs";
+import { t as plugin$1 } from "../plugin-2AyGRwRO.mjs";
 import { toCompatRule } from "eslint-json-compat-utils";
 //#region src/experimental/plugin.ts
 const language = "json/json";

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { t as plugin } from "./plugin-DlF-r5D9.mjs";
+import { t as plugin } from "./plugin-2AyGRwRO.mjs";
 //#region src/index.ts
 const rules = plugin.rules;
 const configs = plugin.configs;

package/dist/{plugin-DlF-r5D9.mjs → plugin-2AyGRwRO.mjs}

@@ -55,7 +55,7 @@ function createRule(rule) {
 }
 //#endregion
 //#region src/rules/bin-name-casing.ts
-const rule$19 = createRule({
+const rule$20 = createRule({
 	create(context) {
 		return { "Program > JSONExpressionStatement > JSONObjectExpression > JSONProperty[key.value=bin]"(node) {
 			if (node.value.type === "JSONObjectExpression") for (const property of node.value.properties) {
@@ -97,7 +97,7 @@ function isImplicitFormat(node) {
 	if (node.type === "JSONLiteral") return true;
 	return node.properties.every((property) => !isJSONStringLiteral(property.key) || !property.key.value.startsWith("."));
 }
-const rule$18 = createRule({
+const rule$19 = createRule({
 	create(context) {
 		const [{ prefer = "explicit" } = {}] = context.options;
 		function validateForExplicit(node) {
@@ -200,7 +200,7 @@ const getTopLevelProperty = (node) => {
 	return n.type === "JSONProperty" ? n.key : void 0;
 };
 const defaultIgnoreProperties = ["files"];
-const rule$17 = createRule({
+const rule$18 = createRule({
 	create(context) {
 		const ignoreProperties = new Set(context.options[0]?.ignoreProperties ?? defaultIgnoreProperties);
 		return {
@@ -256,7 +256,7 @@ const getBundledDependencyNames = (value) => {
 	if (value?.type === "JSONArrayExpression") for (const element of value.elements.filter(isNotNullish).filter(isJSONStringLiteral)) names.add(element.value);
 	return names;
 };
-const rule$16 = createRule({
+const rule$17 = createRule({
 	create(context) {
 		const ignorePrivate = context.options[0]?.ignorePrivate ?? true;
 		let isPrivate = false;
@@ -327,7 +327,7 @@ const getCachedLocalFileRegex = (filename) => {
 		return regex;
 	}
 };
-const rule$15 = createRule({
+const rule$16 = createRule({
 	create(context) {
 		const entryCache = {
 			bin: [],
@@ -404,7 +404,7 @@ const rule$15 = createRule({
 });
 //#endregion
 //#region src/rules/no-redundant-publishConfig.ts
-const rule$14 = createRule({
+const rule$15 = createRule({
 	create(context) {
 		let packageName;
 		let publishConfigAccessProperty;
@@ -450,7 +450,7 @@ const rule$14 = createRule({
 });
 //#endregion
 //#region src/rules/order-properties.ts
-const rule$13 = createRule({
+const rule$14 = createRule({
 	create(context) {
 		return { "Program:exit"() {
 			const { ast, text } = context.sourceCode;
@@ -510,7 +510,7 @@ const rule$13 = createRule({
 //#region src/rules/prefer-rolling-workspace-spec.ts
 const rollingWorkspaceSpecRegex = /^workspace:[*^~]?$/;
 const convertibleSpecRegex = /^(workspace:[~^])/;
-const rule$12 = createRule({
+const rule$13 = createRule({
 	create(context) {
 		const { ignoreDependencies = [], ignorePatterns = [] } = context.options[0] ?? {};
 		const ignoreRegexes = ignorePatterns.map((pattern) => new RegExp(pattern));
@@ -608,7 +608,7 @@ const createUrl = (shorthand) => {
 	}
 	return `${providerUrls.github}${shorthand}`;
 };
-const rule$11 = createRule({
+const rule$12 = createRule({
 	create(context) {
 		const [{ form = "object" } = {}] = context.options;
 		function validateRepositoryForObject(node) {
@@ -687,7 +687,7 @@ const rule$11 = createRule({
 });
 //#endregion
 //#region src/rules/require-attribution.ts
-const rule$10 = createRule({
+const rule$11 = createRule({
 	create(context) {
 		const preferContributorsOnly = context.options[0]?.preferContributorsOnly ?? false;
 		const ignorePrivate = context.options[0]?.ignorePrivate ?? true;
@@ -929,7 +929,7 @@ const rules$2 = Object.fromEntries([
 }));
 //#endregion
 //#region src/rules/restrict-dependency-ranges.ts
-const DEPENDENCY_TYPES = [
+const DEPENDENCY_TYPES$1 = [
 	"dependencies",
 	"devDependencies",
 	"optionalDependencies",
@@ -975,7 +975,7 @@ const schemaOptions = {
 	properties: {
 		forDependencyTypes: {
 			description: "Apply a range type restriction for an entire group of dependencies by which type of dependencies they belong to.",
-			items: { enum: DEPENDENCY_TYPES },
+			items: { enum: DEPENDENCY_TYPES$1 },
 			type: "array"
 		},
 		forPackages: {
@@ -1029,7 +1029,7 @@ const isVersionSupported = (version) => {
 	return !!semver.validRange(rawVersion);
 };
 const POSSIBLE_WORKSPACE_SPEC_REGEX = /(?:workspace:)?[^~]?/;
-const rule$9 = createRule({
+const rule$10 = createRule({
 	create(context) {
 		if (!context.options[0]) return {};
 		const optionsArray = (Array.isArray(context.options[0]) ? context.options[0].toReversed() : [context.options[0]]).map((option) => ({
@@ -1039,7 +1039,7 @@ const rule$9 = createRule({
 		}));
 		return { "Program > JSONExpressionStatement > JSONObjectExpression > JSONProperty[key.type=JSONLiteral][value.type=JSONObjectExpression]"(node) {
 			const dependencyType = node.key.value;
-			if (!DEPENDENCY_TYPES.includes(dependencyType)) return;
+			if (!DEPENDENCY_TYPES$1.includes(dependencyType)) return;
 			for (const property of node.value.properties) {
 				if (!isJSONStringLiteral(property.key) || !isJSONStringLiteral(property.value)) continue;
 				const name = property.key.value;
@@ -1106,6 +1106,73 @@ const rule$9 = createRule({
 	name: "restrict-dependency-ranges"
 });
 //#endregion
+//#region src/rules/restrict-dist-tags.ts
+const DEPENDENCY_TYPES = [
+	"dependencies",
+	"devDependencies",
+	"optionalDependencies",
+	"peerDependencies"
+];
+const DEFAULT_ALLOWED_TAGS = [
+	"latest",
+	"dev",
+	"next",
+	"alpha",
+	"beta",
+	"canary",
+	"rc"
+];
+const distTagPattern = /^[A-Z0-9][\w.-]*$/i;
+function isDistTag(value) {
+	return !semver.validRange(value) && distTagPattern.test(value);
+}
+const rule$9 = createRule({
+	create(context) {
+		const { allowed = DEFAULT_ALLOWED_TAGS, allowedFor } = context.options[0] ?? {};
+		return { "Program > JSONExpressionStatement > JSONObjectExpression > JSONProperty[key.type=JSONLiteral][value.type=JSONObjectExpression]"(node) {
+			const dependencyType = node.key.value;
+			if (!DEPENDENCY_TYPES.includes(dependencyType)) return;
+			for (const property of node.value.properties) {
+				if (!isJSONStringLiteral(property.key) || !isJSONStringLiteral(property.value)) continue;
+				const spec = property.value.value;
+				if (!isDistTag(spec)) continue;
+				if ((allowedFor === void 0 || allowedFor.includes(dependencyType)) && allowed.includes(spec)) continue;
+				context.report({
+					data: {
+						dependencyType,
+						tag: spec
+					},
+					messageId: "disallowedDistTag",
+					node: property.value
+				});
+			}
+		} };
+	},
+	meta: {
+		defaultOptions: [{ allowed: DEFAULT_ALLOWED_TAGS }],
+		docs: { description: "Restricts dependency dist-tags to an allowed list and selected dependency types." },
+		messages: { disallowedDistTag: "The \"{{ tag }}\" dist-tag is not allowed for {{ dependencyType }}." },
+		schema: [{
+			type: "object",
+			properties: {
+				allowed: {
+					description: "Dist-tags allowed in dependency specifications.",
+					type: "array",
+					items: { type: "string" }
+				},
+				allowedFor: {
+					description: "Dependency sections where the allowed dist-tags may be used.",
+					type: "array",
+					items: { enum: DEPENDENCY_TYPES }
+				}
+			},
+			additionalProperties: false
+		}],
+		type: "problem"
+	},
+	name: "restrict-dist-tags"
+});
+//#endregion
 //#region src/rules/restrict-private-properties.ts
 const defaultBlockedProperties = ["files", "publishConfig"];
 const rule$8 = createRule({
@@ -1940,18 +2007,19 @@ const rule = createRule({
 //#region src/plugin.ts
 const require = createRequire(import.meta.url);
 const rules = {
-	"bin-name-casing": rule$19,
-	"exports-subpaths-style": rule$18,
-	"no-empty-fields": rule$17,
-	"no-local-dependencies": rule$16,
-	"no-redundant-files": rule$15,
-	"no-redundant-publishConfig": rule$14,
-	"order-properties": rule$13,
-	"prefer-rolling-workspace-spec": rule$12,
-	"require-attribution": rule$10,
+	"bin-name-casing": rule$20,
+	"exports-subpaths-style": rule$19,
+	"no-empty-fields": rule$18,
+	"no-local-dependencies": rule$17,
+	"no-redundant-files": rule$16,
+	"no-redundant-publishConfig": rule$15,
+	"order-properties": rule$14,
+	"prefer-rolling-workspace-spec": rule$13,
+	"require-attribution": rule$11,
 	...rules$2,
-	"repository-shorthand": rule$11,
-	"restrict-dependency-ranges": rule$9,
+	"repository-shorthand": rule$12,
+	"restrict-dependency-ranges": rule$10,
+	"restrict-dist-tags": rule$9,
 	"restrict-private-properties": rule$8,
 	"restrict-top-level-properties": rule$7,
 	"scripts-name-casing": rule$6,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eslint-plugin-package-json",
-  "version": "1.8.1",
+  "version": "1.9.0",
   "description": "Rules for consistent, readable, and valid package.json files. 🗂️",
   "homepage": "https://github.com/michaelfaith/eslint-plugin-package-json#readme",
   "bugs": {
@@ -61,7 +61,7 @@
     "@astrojs/markdown-satteri": "0.4.1",
     "@astrojs/starlight": "0.42.0",
     "@catppuccin/starlight": "2.1.0",
-    "@eslint-community/eslint-plugin-eslint-comments": "4.8.0",
+    "@eslint-community/eslint-plugin-eslint-comments": "4.8.1",
     "@eslint/js": "10.0.1",
     "@eslint/json": "2.1.0",
     "@eslint/markdown": "8.0.3",
@@ -69,7 +69,7 @@
     "@types/node": "24.13.4",
     "@types/semver": "7.8.0",
     "@typescript/native": "npm:typescript@7.0.2",
-    "@vitest/coverage-v8": "5.0.0",
+    "@vitest/coverage-v8": "5.0.1",
     "@vitest/eslint-plugin": "1.6.27",
     "astro": "7.3.2",
     "astro-og-canvas": "0.13.1",
@@ -78,7 +78,7 @@
     "eslint": "10.10.0",
     "eslint-doc-generator": "3.7.1",
     "eslint-plugin-eslint-plugin": "7.6.2",
-    "eslint-plugin-jsdoc": "64.3.8",
+    "eslint-plugin-jsdoc": "64.4.0",
     "eslint-plugin-jsonc": "3.4.2",
     "eslint-plugin-n": "18.3.0",
     "eslint-plugin-node-dependencies": "2.2.0",
@@ -101,7 +101,7 @@
     "tsdown": "0.23.0",
     "typescript": "npm:@typescript/typescript6@6.0.2",
     "typescript-eslint": "8.70.0",
-    "vitest": "5.0.0"
+    "vitest": "5.0.1"
   },
   "peerDependencies": {
     "@eslint/json": ">=1.0.0",