npm-pkg-lint 1.11.2 → 1.12.0

package/README.md

@@ -51,6 +51,7 @@ Requires files specified in `package.json` to be present.
 
 Verifies the presence of files specified in:
 
+- `exports` (wildcard patterns are ignored)
 - `main`
 - `browser`
 - `module`

package/dist/index.js

@@ -3447,9 +3447,9 @@ var require_locate_path = __commonJS({
   }
 });
 
-// node_modules/find-up/node_modules/path-exists/index.js
+// node_modules/path-exists/index.js
 var require_path_exists = __commonJS({
-  "node_modules/find-up/node_modules/path-exists/index.js"(exports, module2) {
+  "node_modules/path-exists/index.js"(exports, module2) {
     "use strict";
     var fs3 = require("fs");
     var { promisify } = require("util");
@@ -12368,7 +12368,7 @@ var require_unpack = __commonJS({
           const fd = stream.fd;
           if (entry.mtime && !this.noMtime) {
             actions++;
-            const atime = entry.atime || new Date();
+            const atime = entry.atime || /* @__PURE__ */ new Date();
             const mtime = entry.mtime;
             fs3.futimes(fd, atime, mtime, (er) => er ? fs3.utimes(abs, atime, mtime, (er2) => done(er2 && er)) : done());
           }
@@ -12408,7 +12408,7 @@ var require_unpack = __commonJS({
           };
           if (entry.mtime && !this.noMtime) {
             actions++;
-            fs3.utimes(entry.absolute, entry.atime || new Date(), entry.mtime, done);
+            fs3.utimes(entry.absolute, entry.atime || /* @__PURE__ */ new Date(), entry.mtime, done);
           }
           if (this[DOCHOWN](entry)) {
             actions++;
@@ -12652,7 +12652,7 @@ var require_unpack = __commonJS({
         tx.on("end", (_) => {
           let er = null;
           if (entry.mtime && !this.noMtime) {
-            const atime = entry.atime || new Date();
+            const atime = entry.atime || /* @__PURE__ */ new Date();
             const mtime = entry.mtime;
             try {
               fs3.futimesSync(fd, atime, mtime);
@@ -12690,7 +12690,7 @@ var require_unpack = __commonJS({
         }
         if (entry.mtime && !this.noMtime) {
           try {
-            fs3.utimesSync(entry.absolute, entry.atime || new Date(), entry.mtime);
+            fs3.utimesSync(entry.absolute, entry.atime || /* @__PURE__ */ new Date(), entry.mtime);
           } catch (er2) {
           }
         }
@@ -12849,11 +12849,23 @@ var require_constants2 = __commonJS({
     var MAX_SAFE_INTEGER = Number.MAX_SAFE_INTEGER || /* istanbul ignore next */
     9007199254740991;
     var MAX_SAFE_COMPONENT_LENGTH = 16;
+    var RELEASE_TYPES = [
+      "major",
+      "premajor",
+      "minor",
+      "preminor",
+      "patch",
+      "prepatch",
+      "prerelease"
+    ];
     module2.exports = {
-      SEMVER_SPEC_VERSION,
       MAX_LENGTH,
+      MAX_SAFE_COMPONENT_LENGTH,
       MAX_SAFE_INTEGER,
-      MAX_SAFE_COMPONENT_LENGTH
+      RELEASE_TYPES,
+      SEMVER_SPEC_VERSION,
+      FLAG_INCLUDE_PRERELEASE: 1,
+      FLAG_LOOSE: 2
     };
   }
 });
@@ -12933,11 +12945,17 @@ var require_re = __commonJS({
 // node_modules/semver/internal/parse-options.js
 var require_parse_options = __commonJS({
   "node_modules/semver/internal/parse-options.js"(exports, module2) {
-    var opts = ["includePrerelease", "loose", "rtl"];
-    var parseOptions = (options) => !options ? {} : typeof options !== "object" ? { loose: true } : opts.filter((k) => options[k]).reduce((o, k) => {
-      o[k] = true;
-      return o;
-    }, {});
+    var looseOption = Object.freeze({ loose: true });
+    var emptyOpts = Object.freeze({});
+    var parseOptions = (options) => {
+      if (!options) {
+        return emptyOpts;
+      }
+      if (typeof options !== "object") {
+        return looseOption;
+      }
+      return options;
+    };
     module2.exports = parseOptions;
   }
 });
@@ -13107,31 +13125,31 @@ var require_semver = __commonJS({
       }
       // preminor will bump the version up to the next minor release, and immediately
       // down to pre-release. premajor and prepatch work the same way.
-      inc(release, identifier) {
+      inc(release, identifier, identifierBase) {
         switch (release) {
           case "premajor":
             this.prerelease.length = 0;
             this.patch = 0;
             this.minor = 0;
             this.major++;
-            this.inc("pre", identifier);
+            this.inc("pre", identifier, identifierBase);
             break;
           case "preminor":
             this.prerelease.length = 0;
             this.patch = 0;
             this.minor++;
-            this.inc("pre", identifier);
+            this.inc("pre", identifier, identifierBase);
             break;
           case "prepatch":
             this.prerelease.length = 0;
-            this.inc("patch", identifier);
-            this.inc("pre", identifier);
+            this.inc("patch", identifier, identifierBase);
+            this.inc("pre", identifier, identifierBase);
             break;
           case "prerelease":
             if (this.prerelease.length === 0) {
-              this.inc("patch", identifier);
+              this.inc("patch", identifier, identifierBase);
             }
-            this.inc("pre", identifier);
+            this.inc("pre", identifier, identifierBase);
             break;
           case "major":
             if (this.minor !== 0 || this.patch !== 0 || this.prerelease.length === 0) {
@@ -13170,12 +13188,13 @@ var require_semver = __commonJS({
               }
             }
             if (identifier) {
+              const base = Number(identifierBase) ? 1 : 0;
               if (compareIdentifiers(this.prerelease[0], identifier) === 0) {
                 if (isNaN(this.prerelease[1])) {
-                  this.prerelease = [identifier, 0];
+                  this.prerelease = [identifier, base];
                 }
               } else {
-                this.prerelease = [identifier, 0];
+                this.prerelease = [identifier, base];
               }
             }
             break;
@@ -13195,11 +13214,8 @@ var require_semver = __commonJS({
 var require_parse2 = __commonJS({
   "node_modules/semver/functions/parse.js"(exports, module2) {
     var { MAX_LENGTH } = require_constants2();
-    var { re, t } = require_re();
     var SemVer = require_semver();
-    var parseOptions = require_parse_options();
     var parse = (version2, options) => {
-      options = parseOptions(options);
       if (version2 instanceof SemVer) {
         return version2;
       }
@@ -13209,10 +13225,6 @@ var require_parse2 = __commonJS({
       if (version2.length > MAX_LENGTH) {
         return null;
       }
-      const r = options.loose ? re[t.LOOSE] : re[t.FULL];
-      if (!r.test(version2)) {
-        return null;
-      }
       try {
         return new SemVer(version2, options);
       } catch (er) {
@@ -13251,8 +13263,9 @@ var require_clean = __commonJS({
 var require_inc = __commonJS({
   "node_modules/semver/functions/inc.js"(exports, module2) {
     var SemVer = require_semver();
-    var inc = (version2, release, options, identifier) => {
+    var inc = (version2, release, options, identifier, identifierBase) => {
       if (typeof options === "string") {
+        identifierBase = identifier;
         identifier = options;
         options = void 0;
       }
@@ -13260,7 +13273,7 @@ var require_inc = __commonJS({
         return new SemVer(
           version2 instanceof SemVer ? version2.version : version2,
           options
-        ).inc(release, identifier).version;
+        ).inc(release, identifier, identifierBase).version;
       } catch (er) {
         return null;
       }
@@ -13293,19 +13306,32 @@ var require_diff = __commonJS({
     var parse = require_parse2();
     var eq = require_eq();
     var diff = (version1, version2) => {
-      if (eq(version1, version2)) {
+      const v1 = parse(version1);
+      const v2 = parse(version2);
+      if (eq(v1, v2)) {
         return null;
       } else {
-        const v1 = parse(version1);
-        const v2 = parse(version2);
         const hasPre = v1.prerelease.length || v2.prerelease.length;
         const prefix2 = hasPre ? "pre" : "";
         const defaultResult = hasPre ? "prerelease" : "";
-        for (const key in v1) {
-          if (key === "major" || key === "minor" || key === "patch") {
-            if (v1[key] !== v2[key]) {
-              return prefix2 + key;
-            }
+        if (v1.major !== v2.major) {
+          return prefix2 + "major";
+        }
+        if (v1.minor !== v2.minor) {
+          return prefix2 + "minor";
+        }
+        if (v1.patch !== v2.patch) {
+          return prefix2 + "patch";
+        }
+        if (!v1.prerelease.length || !v2.prerelease.length) {
+          if (v1.patch) {
+            return "patch";
+          }
+          if (v1.minor) {
+            return "minor";
+          }
+          if (v1.major) {
+            return "major";
           }
         }
         return defaultResult;
@@ -13860,8 +13886,8 @@ var require_range = __commonJS({
       }
       parseRange(range) {
         range = range.trim();
-        const memoOpts = Object.keys(this.options).join(",");
-        const memoKey = `parseRange:${memoOpts}:${range}`;
+        const memoOpts = (this.options.includePrerelease && FLAG_INCLUDE_PRERELEASE) | (this.options.loose && FLAG_LOOSE);
+        const memoKey = memoOpts + ":" + range;
         const cached = cache2.get(memoKey);
         if (cached) {
           return cached;
@@ -13946,6 +13972,7 @@ var require_range = __commonJS({
       tildeTrimReplace,
       caretTrimReplace
     } = require_re();
+    var { FLAG_INCLUDE_PRERELEASE, FLAG_LOOSE } = require_constants2();
     var isNullSet = (c) => c.value === "<0.0.0-0";
     var isAny = (c) => c.value === "";
     var isSatisfiable = (comparators, options) => {
@@ -14231,12 +14258,6 @@ var require_comparator = __commonJS({
         if (!(comp instanceof Comparator)) {
           throw new TypeError("a Comparator is required");
         }
-        if (!options || typeof options !== "object") {
-          options = {
-            loose: !!options,
-            includePrerelease: false
-          };
-        }
         if (this.operator === "") {
           if (this.value === "") {
             return true;
@@ -14248,13 +14269,29 @@ var require_comparator = __commonJS({
           }
           return new Range(this.value, options).test(comp.semver);
         }
-        const sameDirectionIncreasing = (this.operator === ">=" || this.operator === ">") && (comp.operator === ">=" || comp.operator === ">");
-        const sameDirectionDecreasing = (this.operator === "<=" || this.operator === "<") && (comp.operator === "<=" || comp.operator === "<");
-        const sameSemVer = this.semver.version === comp.semver.version;
-        const differentDirectionsInclusive = (this.operator === ">=" || this.operator === "<=") && (comp.operator === ">=" || comp.operator === "<=");
-        const oppositeDirectionsLessThan = cmp(this.semver, "<", comp.semver, options) && (this.operator === ">=" || this.operator === ">") && (comp.operator === "<=" || comp.operator === "<");
-        const oppositeDirectionsGreaterThan = cmp(this.semver, ">", comp.semver, options) && (this.operator === "<=" || this.operator === "<") && (comp.operator === ">=" || comp.operator === ">");
-        return sameDirectionIncreasing || sameDirectionDecreasing || sameSemVer && differentDirectionsInclusive || oppositeDirectionsLessThan || oppositeDirectionsGreaterThan;
+        options = parseOptions(options);
+        if (options.includePrerelease && (this.value === "<0.0.0-0" || comp.value === "<0.0.0-0")) {
+          return false;
+        }
+        if (!options.includePrerelease && (this.value.startsWith("<0.0.0") || comp.value.startsWith("<0.0.0"))) {
+          return false;
+        }
+        if (this.operator.startsWith(">") && comp.operator.startsWith(">")) {
+          return true;
+        }
+        if (this.operator.startsWith("<") && comp.operator.startsWith("<")) {
+          return true;
+        }
+        if (this.semver.version === comp.semver.version && this.operator.includes("=") && comp.operator.includes("=")) {
+          return true;
+        }
+        if (cmp(this.semver, "<", comp.semver, options) && this.operator.startsWith(">") && comp.operator.startsWith("<")) {
+          return true;
+        }
+        if (cmp(this.semver, ">", comp.semver, options) && this.operator.startsWith("<") && comp.operator.startsWith(">")) {
+          return true;
+        }
+        return false;
       }
     };
     module2.exports = Comparator;
@@ -14512,7 +14549,7 @@ var require_intersects = __commonJS({
     var intersects = (r1, r2, options) => {
       r1 = new Range(r1, options);
       r2 = new Range(r2, options);
-      return r1.intersects(r2);
+      return r1.intersects(r2, options);
     };
     module2.exports = intersects;
   }
@@ -14597,6 +14634,8 @@ var require_subset = __commonJS({
         }
       return true;
     };
+    var minimumVersionWithPreRelease = [new Comparator(">=0.0.0-0")];
+    var minimumVersion = [new Comparator(">=0.0.0")];
     var simpleSubset = (sub, dom, options) => {
       if (sub === dom) {
         return true;
@@ -14605,16 +14644,16 @@ var require_subset = __commonJS({
         if (dom.length === 1 && dom[0].semver === ANY) {
           return true;
         } else if (options.includePrerelease) {
-          sub = [new Comparator(">=0.0.0-0")];
+          sub = minimumVersionWithPreRelease;
         } else {
-          sub = [new Comparator(">=0.0.0")];
+          sub = minimumVersion;
         }
       }
       if (dom.length === 1 && dom[0].semver === ANY) {
         if (options.includePrerelease) {
           return true;
         } else {
-          dom = [new Comparator(">=0.0.0")];
+          dom = minimumVersion;
         }
       }
       const eqSet = /* @__PURE__ */ new Set();
@@ -14814,6 +14853,7 @@ var require_semver2 = __commonJS({
       src: internalRe.src,
       tokens: internalRe.t,
       SEMVER_SPEC_VERSION: constants.SEMVER_SPEC_VERSION,
+      RELEASE_TYPES: constants.RELEASE_TYPES,
       compareIdentifiers: identifiers.compareIdentifiers,
       rcompareIdentifiers: identifiers.rcompareIdentifiers
     };
@@ -16781,7 +16821,7 @@ var require_package = __commonJS({
   "package.json"(exports, module2) {
     module2.exports = {
       name: "npm-pkg-lint",
-      version: "1.11.1",
+      version: "1.11.2",
       description: "Opinionated linter for NPM package tarball and package.json metadata",
       keywords: [
         "lint",
@@ -16840,33 +16880,32 @@ var require_package = __commonJS({
         argparse: "2.0.1",
         execa: "5.1.1",
         "find-up": "5.0.0",
-        semver: "7.3.8",
+        semver: "7.4.0",
         tar: "6.1.13",
         tmp: "0.2.1"
       },
       devDependencies: {
-        "@html-validate/commitlint-config": "3.0.9",
-        "@html-validate/eslint-config": "5.5.19",
-        "@html-validate/eslint-config-jest": "5.5.18",
-        "@html-validate/eslint-config-typescript": "5.5.19",
-        "@html-validate/jest-config": "3.6.2",
-        "@html-validate/prettier-config": "2.3.3",
-        "@html-validate/release-scripts": "3.5.9",
+        "@html-validate/commitlint-config": "3.0.13",
+        "@html-validate/eslint-config": "5.7.3",
+        "@html-validate/eslint-config-jest": "5.7.0",
+        "@html-validate/eslint-config-typescript": "5.7.3",
+        "@html-validate/jest-config": "3.6.3",
+        "@html-validate/prettier-config": "2.3.9",
+        "@html-validate/release-scripts": "4.0.6",
         "@types/argparse": "2.0.10",
-        "@types/glob": "8.0.0",
-        "@types/jest": "29.2.5",
-        "@types/node": "14.18.36",
+        "@types/jest": "29.5.0",
+        "@types/node": "14.18.42",
         "@types/semver": "7.3.13",
-        "@types/tar": "6.1.3",
+        "@types/tar": "6.1.4",
         "@types/tmp": "0.2.3",
-        esbuild: "0.17.0",
-        glob: "8.0.3",
+        esbuild: "0.17.16",
+        glob: "10.0.0",
         husky: "8.0.3",
-        jest: "29.3.1",
-        "lint-staged": "13.1.0",
-        prettier: "2.8.3",
-        "ts-jest": "29.0.5",
-        typescript: "4.9.4"
+        jest: "29.5.0",
+        "lint-staged": "13.2.1",
+        prettier: "2.8.7",
+        "ts-jest": "29.1.0",
+        typescript: "5.0.4"
       },
       engines: {
         node: ">= 14.0"
@@ -17096,6 +17135,7 @@ function isBlacklisted(filename2) {
 // src/tarball.ts
 var import_fs = __toESM(require("fs"));
 var import_tar = __toESM(require_tar());
+var ruleId = "no-missing-main";
 function normalize(filename2) {
   return filename2.replace(/^[^/]+\//, "");
 }
@@ -17154,20 +17194,40 @@ function* yieldRequiredFiles(src, template) {
     yield { ...template, filename: filename2 };
   }
 }
+function* yieldExportedFiles(exports) {
+  if (!exports) {
+    return;
+  }
+  if (typeof exports === "string") {
+    yield {
+      field: "exports",
+      ruleId: "no-missing-exports",
+      filename: exports
+    };
+    return;
+  }
+  for (const [key, value] of Object.entries(exports)) {
+    if (key.includes("*")) {
+      continue;
+    }
+    yield* yieldExportedFiles(value);
+  }
+}
 function* requiredFiles(pkg) {
+  yield* yieldExportedFiles(pkg.exports);
   if (pkg.main) {
-    yield* yieldRequiredFiles(pkg.main, { field: "main", ruleId: "no-missing-main" });
+    yield* yieldRequiredFiles(pkg.main, { field: "main", ruleId });
   }
   if (pkg.browser) {
-    yield* yieldRequiredFiles(pkg.browser, { field: "browser", ruleId: "no-missing-main" });
+    yield* yieldRequiredFiles(pkg.browser, { field: "browser", ruleId });
   }
   if (pkg.module) {
-    yield* yieldRequiredFiles(pkg.module, { field: "module", ruleId: "no-missing-main" });
+    yield* yieldRequiredFiles(pkg.module, { field: "module", ruleId });
   }
   if (pkg["jsnext:main"]) {
     yield* yieldRequiredFiles(pkg["jsnext:main"], {
       field: "jsnext:main",
-      ruleId: "no-missing-main"
+      ruleId
     });
   }
   if (pkg.typings) {
@@ -17392,12 +17452,12 @@ var nodeVersions = [
 ];
 
 // src/rules/outdated-engines.ts
-var ruleId = "outdated-engines";
+var ruleId2 = "outdated-engines";
 var severity = import_stylish.Severity.ERROR;
 function* outdatedEngines(pkg) {
   if (!pkg.engines || !pkg.engines.node) {
     yield {
-      ruleId,
+      ruleId: ruleId2,
       severity,
       message: "Missing engines.node field",
       line: 1,
@@ -17408,7 +17468,7 @@ function* outdatedEngines(pkg) {
   const range = pkg.engines.node;
   if (!import_semver.default.validRange(range)) {
     yield {
-      ruleId,
+      ruleId: ruleId2,
       severity,
       message: `engines.node "${range}" is not a valid semver range`,
       line: 1,
@@ -17428,7 +17488,7 @@ function* outdatedEngines(pkg) {
     const nodeRelease = parsed.major || `0.${parsed.minor}`;
     const message = `engines.node is satisfied by Node ${nodeRelease} (EOL since ${descriptor.eol})`;
     yield {
-      ruleId,
+      ruleId: ruleId2,
       severity,
       message,
       line: 1,
@@ -17455,7 +17515,7 @@ async function npmInfo(pkg) {
 }
 
 // src/rules/verify-engine-constraint.ts
-var ruleId2 = "invalid-engine-constraint";
+var ruleId3 = "invalid-engine-constraint";
 async function* getDeepDependencies(pkg, dependency) {
   const pkgData = dependency ? await npmInfo(dependency) : pkg;
   for (const [key, value] of Object.entries(pkgData.dependencies ?? {})) {
@@ -17483,7 +17543,7 @@ async function verifyEngineConstraint(pkg) {
     }
     if (!import_semver2.default.satisfies(minDeclared, constraint)) {
       messages.push({
-        ruleId: ruleId2,
+        ruleId: ruleId3,
         severity: 2,
         message: `the transitive dependency "${dependency}" (node ${constraint}) does not satisfy the declared node engine "${declaredConstraint}"`,
         line: 1,
@@ -17497,7 +17557,7 @@ async function verifyEngineConstraint(pkg) {
 // src/rules/types-node-matching-engine.ts
 var import_semver3 = __toESM(require_semver2());
 var import_stylish2 = __toESM(require_dist());
-var ruleId3 = "types-node-matching-engine";
+var ruleId4 = "types-node-matching-engine";
 var severity2 = import_stylish2.Severity.ERROR;
 function* typesNodeMatchingEngine(pkg) {
   if (!pkg.engines || !pkg.engines.node) {
@@ -17518,7 +17578,7 @@ function* typesNodeMatchingEngine(pkg) {
   }
   if (typesVersion.major !== nodeVersion.major) {
     yield {
-      ruleId: ruleId3,
+      ruleId: ruleId4,
       severity: severity2,
       message: `@types/node v${typesVersion.major} does not equal engines.node v${nodeVersion.major}`,
       line: 1,