npm-pkg-lint 5.1.10 → 5.1.12

package/dist/index.js

@@ -7802,7 +7802,7 @@ var _ = /* @__PURE__ */ Symbol("bufferLength");
 var bi = /* @__PURE__ */ Symbol("bufferPush");
 var Ie = /* @__PURE__ */ Symbol("bufferShift");
 var L = /* @__PURE__ */ Symbol("objectMode");
-var w = /* @__PURE__ */ Symbol("destroyed");
+var S = /* @__PURE__ */ Symbol("destroyed");
 var _i = /* @__PURE__ */ Symbol("error");
 var Oi = /* @__PURE__ */ Symbol("emitData");
 var Is = /* @__PURE__ */ Symbol("emitEnd");
@@ -7860,7 +7860,7 @@ var A = class extends Di {
   [Ne] = false;
   [qt] = null;
   [_] = 0;
-  [w] = false;
+  [S] = false;
   [Jt];
   [Ce] = false;
   [Rt] = 0;
@@ -7909,7 +7909,7 @@ var A = class extends Di {
   write(t, e, i) {
     if (this[Ce]) return false;
     if (this[Q]) throw new Error("write after end");
-    if (this[w]) return this.emit("error", Object.assign(new Error("Cannot call write after a stream was destroyed"), { code: "ERR_STREAM_DESTROYED" })), true;
+    if (this[S]) return this.emit("error", Object.assign(new Error("Cannot call write after a stream was destroyed"), { code: "ERR_STREAM_DESTROYED" })), true;
     typeof e == "function" && (i = e, e = "utf8"), e || (e = "utf8");
     let r = this[Z] ? jt : Yr;
     if (!this[L] && !Buffer.isBuffer(t)) {
@@ -7920,7 +7920,7 @@ var A = class extends Di {
     return this[L] ? (this[g] && this[_] !== 0 && this[Ae](true), this[g] ? this.emit("data", t) : this[bi](t), this[_] !== 0 && this.emit("readable"), i && r(i), this[g]) : t.length ? (typeof t == "string" && !(e === this[z] && !this[Mt]?.lastNeed) && (t = Buffer.from(t, e)), Buffer.isBuffer(t) && this[z] && (t = this[Mt].write(t)), this[g] && this[_] !== 0 && this[Ae](true), this[g] ? this.emit("data", t) : this[bi](t), this[_] !== 0 && this.emit("readable"), i && r(i), this[g]) : (this[_] !== 0 && this.emit("readable"), i && r(i), this[g]);
   }
   read(t) {
-    if (this[w]) return null;
+    if (this[S]) return null;
     if (this[C] = false, this[_] === 0 || t === 0 || t && t > this[_]) return this[J](), null;
     this[L] && (t = null), this[b].length > 1 && !this[L] && (this[b] = [this[z] ? this[b].join("") : Buffer.concat(this[b], this[_])]);
     let e = this[Ns](t || null, this[b][0]);
@@ -7938,7 +7938,7 @@ var A = class extends Di {
     return typeof t == "function" && (i = t, t = void 0), typeof e == "function" && (i = e, e = "utf8"), t !== void 0 && this.write(t, e), i && this.once("end", i), this[Q] = true, this.writable = false, (this[g] || !this[Qt]) && this[J](), this;
   }
   [Bt]() {
-    this[w] || (!this[Rt] && !this[N].length && (this[C] = true), this[Qt] = false, this[g] = true, this.emit("resume"), this[b].length ? this[Ae]() : this[Q] ? this[J]() : this.emit("drain"));
+    this[S] || (!this[Rt] && !this[N].length && (this[C] = true), this[Qt] = false, this[g] = true, this.emit("resume"), this[b].length ? this[Ae]() : this[Q] ? this[J]() : this.emit("drain"));
   }
   resume() {
     return this[Bt]();
@@ -7947,7 +7947,7 @@ var A = class extends Di {
     this[g] = false, this[Qt] = true, this[C] = false;
   }
   get destroyed() {
-    return this[w];
+    return this[S];
   }
   get flowing() {
     return this[g];
@@ -7971,7 +7971,7 @@ var A = class extends Di {
     return this.emit("data", t), this[g];
   }
   pipe(t, e) {
-    if (this[w]) return t;
+    if (this[S]) return t;
     this[C] = false;
     let i = this[nt];
     return e = e || {}, t === Ds.stdout || t === Ds.stderr ? e.end = false : e.end = e.end !== false, e.proxyErrors = !!e.proxyErrors, i ? e.end && t.end() : (this[N].push(e.proxyErrors ? new Li(this, t, e) : new Fe(this, t, e)), this[Z] ? jt(() => this[Bt]()) : this[Bt]()), t;
@@ -8009,15 +8009,15 @@ var A = class extends Di {
     return this[nt];
   }
   [J]() {
-    !this[De] && !this[nt] && !this[w] && this[b].length === 0 && this[Q] && (this[De] = true, this.emit("end"), this.emit("prefinish"), this.emit("finish"), this[Ne] && this.emit("close"), this[De] = false);
+    !this[De] && !this[nt] && !this[S] && this[b].length === 0 && this[Q] && (this[De] = true, this.emit("end"), this.emit("prefinish"), this.emit("finish"), this[Ne] && this.emit("close"), this[De] = false);
   }
   emit(t, ...e) {
     let i = e[0];
-    if (t !== "error" && t !== "close" && t !== w && this[w]) return false;
+    if (t !== "error" && t !== "close" && t !== S && this[S]) return false;
     if (t === "data") return !this[L] && !i ? false : this[Z] ? (jt(() => this[Oi](i)), true) : this[Oi](i);
     if (t === "end") return this[Is]();
     if (t === "close") {
-      if (this[Ne] = true, !this[nt] && !this[w]) return false;
+      if (this[Ne] = true, !this[nt] && !this[S]) return false;
       let n = super.emit("close");
       return this.removeAllListeners("close"), n;
     } else if (t === "error") {
@@ -8069,7 +8069,7 @@ var A = class extends Di {
   }
   async promise() {
     return new Promise((t, e) => {
-      this.on(w, () => e(new Error("stream destroyed"))), this.on("error", (i) => e(i)), this.on("end", () => t());
+      this.on(S, () => e(new Error("stream destroyed"))), this.on("error", (i) => e(i)), this.on("end", () => t());
     });
   }
   [Symbol.asyncIterator]() {
@@ -8081,14 +8081,14 @@ var A = class extends Di {
       if (r !== null) return Promise.resolve({ done: false, value: r });
       if (this[Q]) return e();
       let n, o, h = (d) => {
-        this.off("data", a), this.off("end", l), this.off(w, c), e(), o(d);
+        this.off("data", a), this.off("end", l), this.off(S, c), e(), o(d);
       }, a = (d) => {
-        this.off("error", h), this.off("end", l), this.off(w, c), this.pause(), n({ value: d, done: !!this[Q] });
+        this.off("error", h), this.off("end", l), this.off(S, c), this.pause(), n({ value: d, done: !!this[Q] });
       }, l = () => {
-        this.off("error", h), this.off("data", a), this.off(w, c), e(), n({ done: true, value: void 0 });
+        this.off("error", h), this.off("data", a), this.off(S, c), e(), n({ done: true, value: void 0 });
       }, c = () => h(new Error("stream destroyed"));
-      return new Promise((d, S) => {
-        o = S, n = d, this.once(w, c), this.once("error", h), this.once("end", l), this.once("data", a);
+      return new Promise((d, y) => {
+        o = y, n = d, this.once(S, c), this.once("error", h), this.once("end", l), this.once("data", a);
       });
     }, throw: e, return: e, [Symbol.asyncIterator]() {
       return this;
@@ -8097,21 +8097,21 @@ var A = class extends Di {
   }
   [Symbol.iterator]() {
     this[C] = false;
-    let t = false, e = () => (this.pause(), this.off(_i, e), this.off(w, e), this.off("end", e), t = true, { done: true, value: void 0 }), i = () => {
+    let t = false, e = () => (this.pause(), this.off(_i, e), this.off(S, e), this.off("end", e), t = true, { done: true, value: void 0 }), i = () => {
       if (t) return e();
       let r = this.read();
       return r === null ? e() : { done: false, value: r };
     };
-    return this.once("end", e), this.once(_i, e), this.once(w, e), { next: i, throw: e, return: e, [Symbol.iterator]() {
+    return this.once("end", e), this.once(_i, e), this.once(S, e), { next: i, throw: e, return: e, [Symbol.iterator]() {
       return this;
     }, [Symbol.dispose]: () => {
     } };
   }
   destroy(t) {
-    if (this[w]) return t ? this.emit("error", t) : this.emit(w), this;
-    this[w] = true, this[C] = true, this[b].length = 0, this[_] = 0;
+    if (this[S]) return t ? this.emit("error", t) : this.emit(S), this;
+    this[S] = true, this[C] = true, this[b].length = 0, this[_] = 0;
     let e = this;
-    return typeof e.close == "function" && !this[Ne] && e.close(), t ? this.emit("error", t) : this.emit(w), this;
+    return typeof e.close == "function" && !this[Ne] && e.close(), t ? this.emit("error", t) : this.emit(S), this;
   }
   static get isStream() {
     return Wr;
@@ -8862,7 +8862,7 @@ var st = /* @__PURE__ */ Symbol("queue");
 var mt = /* @__PURE__ */ Symbol("ended");
 var Yi = /* @__PURE__ */ Symbol("emittedEnd");
 var At = /* @__PURE__ */ Symbol("emit");
-var y = /* @__PURE__ */ Symbol("unzip");
+var w = /* @__PURE__ */ Symbol("unzip");
 var Xe = /* @__PURE__ */ Symbol("consumeChunk");
 var qe = /* @__PURE__ */ Symbol("consumeChunkSub");
 var Ki = /* @__PURE__ */ Symbol("consumeBody");
@@ -8902,7 +8902,7 @@ var rt = class extends Dn {
   [V];
   [he];
   [mt] = false;
-  [y];
+  [w];
   [$] = false;
   [It];
   [je] = false;
@@ -9012,7 +9012,13 @@ var rt = class extends Dn {
     }
   }
   abort(t) {
-    this[$] || (this[$] = true, this.emit("abort", t), this.warn("TAR_ABORT", t, { recoverable: false }));
+    if (!this[$]) {
+      if (this[w]) {
+        let e = this[w];
+        e.write = () => true, e.end = () => e, e.emit = () => false, e.destroy?.();
+      }
+      this[$] = true, this.emit("abort", t), this.warn("TAR_ABORT", t, { recoverable: false });
+    }
   }
   [Xs](t) {
     this[$i] += t.length;
@@ -9021,11 +9027,11 @@ var rt = class extends Dn {
   }
   write(t, e, i) {
     if (typeof e == "function" && (i = e, e = void 0), typeof t == "string" && (t = Buffer.from(t, typeof e == "string" ? e : "utf8")), this[$]) return i?.(), false;
-    if ((this[y] === void 0 || this.brotli === void 0 && this[y] === false) && t) {
+    if ((this[w] === void 0 || this.brotli === void 0 && this[w] === false) && t) {
       if (this[p] && (t = Buffer.concat([this[p], t]), this[p] = void 0), t.length < An) return this[p] = t, i?.(), true;
-      for (let a = 0; this[y] === void 0 && a < Xi.length; a++) t[a] !== Xi[a] && (this[y] = false);
+      for (let a = 0; this[w] === void 0 && a < Xi.length; a++) t[a] !== Xi[a] && (this[w] = false);
       let o = false;
-      if (this[y] === false && this.zstd !== false) {
+      if (this[w] === false && this.zstd !== false) {
         o = true;
         for (let a = 0; a < qi.length; a++) if (t[a] !== qi[a]) {
           o = false;
@@ -9033,27 +9039,27 @@ var rt = class extends Dn {
         }
       }
       let h = this.brotli === void 0 && !o;
-      if (this[y] === false && h) if (t.length < 512) if (this[mt]) this.brotli = true;
+      if (this[w] === false && h) if (t.length < 512) if (this[mt]) this.brotli = true;
       else return this[p] = t, i?.(), true;
       else try {
         new F(t.subarray(0, 512)), this.brotli = false;
       } catch {
         this.brotli = true;
       }
-      if (this[y] === void 0 || this[y] === false && (this.brotli || o)) {
+      if (this[w] === void 0 || this[w] === false && (this.brotli || o)) {
         let a = this[mt];
-        this[mt] = false, this[y] = this[y] === void 0 ? new Ue({}) : o ? new Ke({}) : new Ge({}), this[y].on("data", (c) => {
+        this[mt] = false, this[w] = this[w] === void 0 ? new Ue({}) : o ? new Ke({}) : new Ge({}), this[w].on("data", (c) => {
           this[Xs](c) && this[Xe](c);
-        }), this[y].on("error", (c) => {
+        }), this[w].on("error", (c) => {
           this[$] || this.abort(c);
-        }), this[y].on("end", () => {
+        }), this[w].on("end", () => {
           this[mt] = true, this[Xe]();
         }), this[Yt] = true, this[le] += t.length;
-        let l = !!this[y][a ? "end" : "write"](t);
+        let l = !!this[w][a ? "end" : "write"](t);
         return this[Yt] = false, i?.(), l;
       }
     }
-    this[Yt] = true, this[y] ? (this[le] += t.length, this[y].write(t)) : this[Xe](t), this[Yt] = false;
+    this[Yt] = true, this[w] ? (this[le] += t.length, this[w].write(t)) : this[Xe](t), this[Yt] = false;
     let n = this[st].length > 0 ? false : this[it] ? this[it].flowing : true;
     return !n && this[st].length === 0 && this[it]?.once("drain", () => this.emit("drain")), i?.(), n;
   }
@@ -9108,7 +9114,7 @@ var rt = class extends Dn {
     e < i && (this[p] = this[p] ? Buffer.concat([t.subarray(e), this[p]]) : t.subarray(e));
   }
   end(t, e, i) {
-    return typeof t == "function" && (i = t, e = void 0, t = void 0), typeof e == "function" && (i = e, e = void 0), typeof t == "string" && (t = Buffer.from(t, e)), i && this.once("finish", i), this[$] || (this[y] ? (t && (this[le] += t.length, this[y].write(t)), this[y].end()) : (this[mt] = true, (this.brotli === void 0 || this.zstd === void 0) && (t = t || Buffer.alloc(0)), t && this.write(t), this[Qe]())), this;
+    return typeof t == "function" && (i = t, e = void 0, t = void 0), typeof e == "function" && (i = e, e = void 0), typeof t == "string" && (t = Buffer.from(t, e)), i && this.once("finish", i), this[$] || (this[w] ? (t && (this[le] += t.length, this[w].write(t)), this[w].end()) : (this[mt] = true, (this.brotli === void 0 || this.zstd === void 0) && (t = t || Buffer.alloc(0)), t && this.write(t), this[Qe]())), this;
   }
 };
 var ut = (s3) => {
@@ -9997,13 +10003,13 @@ var no = (s3, t) => {
 };
 var gr = (s3, t, e) => {
   s3 = f(s3);
-  let i = t.umask ?? 18, r = t.mode | 448, n = (r & i) !== 0, o = t.uid, h = t.gid, a = typeof o == "number" && typeof h == "number" && (o !== t.processUid || h !== t.processGid), l = t.preserve, c = t.unlink, d = f(t.cwd), S = (E, x) => {
-    E ? e(E) : x && a ? Es(x, o, h, (Le) => S(Le)) : n ? k.chmod(s3, r, e) : e();
+  let i = t.umask ?? 18, r = t.mode | 448, n = (r & i) !== 0, o = t.uid, h = t.gid, a = typeof o == "number" && typeof h == "number" && (o !== t.processUid || h !== t.processGid), l = t.preserve, c = t.unlink, d = f(t.cwd), y = (E, x) => {
+    E ? e(E) : x && a ? Es(x, o, h, (Le) => y(Le)) : n ? k.chmod(s3, r, e) : e();
   };
-  if (s3 === d) return no(s3, S);
-  if (l) return ro.mkdir(s3, { mode: r, recursive: true }).then((E) => S(null, E ?? void 0), S);
+  if (s3 === d) return no(s3, y);
+  if (l) return ro.mkdir(s3, { mode: r, recursive: true }).then((E) => y(null, E ?? void 0), y);
   let D = f(Si.relative(d, s3)).split("/");
-  Ss(d, D, r, c, d, void 0, S);
+  Ss(d, D, r, c, d, void 0, y);
 };
 var Ss = (s3, t, e, i, r, n, o) => {
   if (t.length === 0) return o(null, n);
@@ -10313,12 +10319,12 @@ var Xt = class extends rt {
       if (typeof l == "number" && t.mtime && !this.noMtime) {
         n++;
         let c = t.atime || /* @__PURE__ */ new Date(), d = t.mtime;
-        m.futimes(l, c, d, (S) => S ? m.utimes(a, c, d, (T) => o(T && S)) : o());
+        m.futimes(l, c, d, (y) => y ? m.utimes(a, c, d, (T) => o(T && y)) : o());
       }
       if (typeof l == "number" && this[ge](t)) {
         n++;
         let c = this[be](t), d = this[_e](t);
-        typeof c == "number" && typeof d == "number" && m.fchown(l, c, d, (S) => S ? m.chown(a, c, d, (T) => o(T && S)) : o());
+        typeof c == "number" && typeof d == "number" && m.fchown(l, c, d, (y) => y ? m.chown(a, c, d, (T) => o(T && y)) : o());
       }
       o();
     });
@@ -10645,27 +10651,27 @@ var go = (s3, t) => {
       T ? v.close(n, (E) => h(T)) : h(null, D);
     }, l = 0;
     if (o === 0) return a(null, 0);
-    let c = 0, d = Buffer.alloc(512), S = (T, D) => {
+    let c = 0, d = Buffer.alloc(512), y = (T, D) => {
       if (T || D === void 0) return a(T);
-      if (c += D, c < 512 && D) return v.read(n, d, c, d.length - c, l + c, S);
+      if (c += D, c < 512 && D) return v.read(n, d, c, d.length - c, l + c, y);
       if (l === 0 && d[0] === 31 && d[1] === 139) return a(new Error("cannot append to compressed archives"));
       if (c < 512) return a(null, l);
       let E = new F(d);
       if (!E.cksumValid) return a(null, l);
       let x = 512 * Math.ceil((E.size ?? 0) / 512);
       if (l + x + 512 > o || (l += x + 512, l >= o)) return a(null, l);
-      s3.mtimeCache && E.mtime && s3.mtimeCache.set(String(E.path), E.mtime), c = 0, v.read(n, d, 0, 512, l, S);
+      s3.mtimeCache && E.mtime && s3.mtimeCache.set(String(E.path), E.mtime), c = 0, v.read(n, d, 0, 512, l, y);
     };
-    v.read(n, d, 0, 512, l, S);
+    v.read(n, d, 0, 512, l, y);
   };
   return new Promise((n, o) => {
     e.on("error", o);
     let h = "r+", a = (l, c) => {
       if (l && l.code === "ENOENT" && h === "r+") return h = "w+", v.open(s3.file, h, a);
       if (l || !c) return o(l);
-      v.fstat(c, (d, S) => {
+      v.fstat(c, (d, y) => {
         if (d) return v.close(c, () => o(d));
-        i(c, S.size, (T, D) => {
+        i(c, y.size, (T, D) => {
           if (T) return o(T);
           let E = new et(s3.file, { fd: c, start: D });
           e.pipe(E), E.on("error", o), E.on("close", n), _o(e, t);
@@ -10950,6 +10956,20 @@ function jsonLocation(ast, pick, ...datapath) {
   }
 }
 
+// src/utils/normalize-dependency.ts
+function normalizeDependency(key, value) {
+  if (value.startsWith("npm:")) {
+    const spec = value.slice("npm:".length);
+    const [name, version2 = ""] = spec.split(/(?<=.)@/, 2);
+    return { key, name, version: version2 };
+  }
+  return {
+    key,
+    name: key,
+    version: value
+  };
+}
+
 // node_modules/nano-spawn/source/context.js
 import process3 from "node:process";
 import { stripVTControlCharacters } from "node:util";
@@ -11320,19 +11340,19 @@ function createEntry(key, version2, source) {
   if (version2.startsWith("file:")) {
     return null;
   }
-  if (version2.startsWith("npm:")) {
-    const [newKey, newVersion] = version2.slice("npm:".length).split("@", 2);
-    key = newKey;
-    version2 = newVersion;
+  const { name, version: normalizedVersion } = normalizeDependency(key, version2);
+  if (normalizedVersion === "") {
+    return null;
   }
-  if (key === "@types/node") {
+  if (name === "@types/node") {
     return null;
   }
-  const minVersion = import_semver.default.minVersion(version2);
+  const minVersion = import_semver.default.minVersion(normalizedVersion);
   return {
-    name: key,
-    version: version2,
-    spec: `${key}@${minVersion ? minVersion.version : version2}`,
+    key,
+    name,
+    version: normalizedVersion,
+    spec: `${name}@${minVersion ? minVersion.version : normalizedVersion}`,
     source
   };
 }
@@ -11369,7 +11389,7 @@ async function deprecatedDependency(pkg, pkgAst, options) {
       if (!deprecated) {
         continue;
       }
-      const { line, column } = jsonLocation(pkgAst, "member", dependency.source, dependency.name);
+      const { line, column } = jsonLocation(pkgAst, "member", dependency.source, dependency.key);
       messages.push({
         ruleId: ruleId3,
         severity: 2,
@@ -11382,7 +11402,7 @@ async function deprecatedDependency(pkg, pkgAst, options) {
         if (dependency.source === "devDependencies") {
           continue;
         }
-        const { line, column } = jsonLocation(pkgAst, "member", dependency.source, dependency.name);
+        const { line, column } = jsonLocation(pkgAst, "member", dependency.source, dependency.key);
         messages.push({
           ruleId: ruleId3,
           severity: 1,
@@ -11884,10 +11904,59 @@ function* shadowedTypes(pkg, pkgAst) {
   }
 }
 
-// src/rules/types-node-matching-engine.ts
+// src/rules/tsconfig-base-matching-engine.ts
 var import_semver3 = __toESM(require_semver2(), 1);
-var ruleId12 = "types-node-matching-engine";
+var ruleId12 = "tsconfig-base-matching-engine";
 var severity10 = Severity.ERROR;
+var matchDependency = /^@tsconfig\/node(\d+)$/;
+function* tsconfigBaseMatchingEngine(pkg, pkgAst) {
+  if (!pkg.engines?.node) {
+    return;
+  }
+  const nodeVersion = import_semver3.default.validRange(pkg.engines.node) ? import_semver3.default.minVersion(pkg.engines.node, {}) : null;
+  if (!nodeVersion) {
+    return;
+  }
+  for (const source of ["dependencies", "devDependencies", "peerDependencies"]) {
+    const dependencies = pkg[source] ?? {};
+    const tsconfig = Object.keys(dependencies).filter((it2) => matchDependency.test(it2));
+    if (tsconfig.length === 0) {
+      continue;
+    }
+    const [first, ...duplicates] = tsconfig;
+    if (duplicates.length > 0) {
+      for (const dup of duplicates) {
+        const { line, column } = jsonLocation(pkgAst, "member", source, dup);
+        yield {
+          ruleId: ruleId12,
+          severity: severity10,
+          message: `${dup} and ${first} cannot be used at the same time`,
+          line,
+          column
+        };
+      }
+      continue;
+    }
+    const match2 = matchDependency.exec(first);
+    const baseVersion = Number(match2[1]);
+    if (baseVersion !== nodeVersion.major) {
+      const { line, column } = jsonLocation(pkgAst, "member", source, first);
+      const expectedVersion = `v${String(nodeVersion.major)}`;
+      yield {
+        ruleId: ruleId12,
+        severity: severity10,
+        message: `${first} does not match engines.node ${expectedVersion}`,
+        line,
+        column
+      };
+    }
+  }
+}
+
+// src/rules/types-node-matching-engine.ts
+var import_semver4 = __toESM(require_semver2(), 1);
+var ruleId13 = "types-node-matching-engine";
+var severity11 = Severity.ERROR;
 function* typesNodeMatchingEngine(pkg, pkgAst) {
   if (!pkg.engines?.node) {
     return;
@@ -11901,8 +11970,8 @@ function* typesNodeMatchingEngine(pkg, pkgAst) {
     if (declaredVersion === "latest") {
       continue;
     }
-    const nodeVersion = import_semver3.default.minVersion(pkg.engines.node);
-    const typesVersion = import_semver3.default.minVersion(declaredVersion);
+    const nodeVersion = import_semver4.default.minVersion(pkg.engines.node);
+    const typesVersion = import_semver4.default.minVersion(declaredVersion);
     if (!nodeVersion || !typesVersion) {
       continue;
     }
@@ -11911,8 +11980,8 @@ function* typesNodeMatchingEngine(pkg, pkgAst) {
       const actualVersion = `v${String(typesVersion.major)}`;
       const expectedVersion = `v${String(nodeVersion.major)}`;
       yield {
-        ruleId: ruleId12,
-        severity: severity10,
+        ruleId: ruleId13,
+        severity: severity11,
         message: `@types/node ${actualVersion} does not equal engines.node ${expectedVersion}`,
         line,
         column
@@ -11922,8 +11991,8 @@ function* typesNodeMatchingEngine(pkg, pkgAst) {
 }
 
 // src/rules/verify-engine-constraint.ts
-var import_semver4 = __toESM(require_semver2(), 1);
-var ruleId13 = "invalid-engine-constraint";
+var import_semver5 = __toESM(require_semver2(), 1);
+var ruleId14 = "invalid-engine-constraint";
 async function* getDeepDependencies(pkg, visited, dependency) {
   if (dependency) {
     if (visited.has(dependency)) {
@@ -11937,15 +12006,16 @@ async function* getDeepDependencies(pkg, visited, dependency) {
   }
   const { dependencies = {} } = pkgData;
   for (let [key, version2] of Object.entries(dependencies)) {
-    if (version2.startsWith("npm:")) {
-      const [newKey, newVersion] = version2.slice("npm:".length).split("@", 2);
-      key = newKey;
-      version2 = newVersion;
+    const normalized = normalizeDependency(key, version2);
+    key = normalized.name;
+    version2 = normalized.version;
+    if (version2 === "") {
+      continue;
     }
     if (key === "@types/node") {
       continue;
     }
-    const minVersion = import_semver4.default.minVersion(version2);
+    const minVersion = import_semver5.default.minVersion(version2);
     const deep = `${key}@${minVersion ? minVersion.version : version2}`;
     yield deep;
     yield* getDeepDependencies(pkg, visited, deep);
@@ -11960,9 +12030,9 @@ async function verifyDependency(dependency, minDeclared, declaredConstraint) {
   if (!constraint) {
     return null;
   }
-  if (!import_semver4.default.satisfies(minDeclared, constraint)) {
+  if (!import_semver5.default.satisfies(minDeclared, constraint)) {
     return {
-      ruleId: ruleId13,
+      ruleId: ruleId14,
       severity: 2,
       message: `the transitive dependency "${dependency}" (node ${constraint}) does not satisfy the declared node engine "${declaredConstraint}"`,
       line: 1,
@@ -11976,7 +12046,7 @@ async function verifyEngineConstraint(pkg) {
   if (!declaredConstraint) {
     return [];
   }
-  const minDeclared = import_semver4.default.minVersion(declaredConstraint);
+  const minDeclared = import_semver5.default.minVersion(declaredConstraint);
   if (!minDeclared) {
     throw new Error(`Failed to parse engine constraint "${declaredConstraint}"`);
   }
@@ -11991,7 +12061,7 @@ async function verifyEngineConstraint(pkg) {
     } catch (err) {
       if (isNpmInfoError(err) && err.code === "E404") {
         messages.push({
-          ruleId: ruleId13,
+          ruleId: ruleId14,
           severity: 1,
           message: `the transitive dependency "${dependency}" is not published to the NPM registry`,
           line: 1,
@@ -12194,11 +12264,7 @@ function verifyFields(pkg, pkgAst, options) {
   return messages;
 }
 function getActualDependency(key, version2) {
-  if (version2.startsWith("npm:")) {
-    const [name] = version2.slice("npm:".length).split("@", 2);
-    return name;
-  }
-  return key;
+  return normalizeDependency(key, version2).name;
 }
 function verifyDependencies(pkg, pkgAst, options) {
   const messages = [];
@@ -12223,27 +12289,29 @@ function verifyDependencies(pkg, pkgAst, options) {
       });
     }
   }
-  function verifyObsolete(dependency, source) {
+  function verifyObsolete(key, version2, source) {
+    const { name: dependency } = normalizeDependency(key, version2);
     const obsolete2 = isObsoleteDependency(dependency);
     if (obsolete2) {
-      const { line, column } = jsonLocation(pkgAst, "member", source, dependency);
+      const { line, column } = jsonLocation(pkgAst, "member", source, key);
+      const name = key === dependency ? `"${dependency}"` : `"${key}" ("npm:${dependency}")`;
       messages.push({
         ruleId: "obsolete-dependency",
         severity: 2,
-        message: `"${dependency}" is obsolete and should no longer be used: ${obsolete2.message}`,
+        message: `${name} is obsolete and should no longer be used: ${obsolete2.message}`,
         line,
         column
       });
     }
   }
-  for (const dependency of Object.keys(dependencies)) {
-    verifyObsolete(dependency, "dependencies");
+  for (const [key, version2] of Object.entries(dependencies)) {
+    verifyObsolete(key, version2, "dependencies");
   }
-  for (const dependency of Object.keys(devDependencies)) {
-    verifyObsolete(dependency, "devDependencies");
+  for (const [key, version2] of Object.entries(devDependencies)) {
+    verifyObsolete(key, version2, "devDependencies");
   }
-  for (const dependency of Object.keys(peerDependencies)) {
-    verifyObsolete(dependency, "peerDependencies");
+  for (const [key, version2] of Object.entries(peerDependencies)) {
+    verifyObsolete(key, version2, "peerDependencies");
   }
   return messages;
 }
@@ -12263,6 +12331,7 @@ async function verifyPackageJson(pkg, pkgAst, filePath, options = { allowedDepen
     ...outdatedEngines(pkg, pkgAst, ignoreNodeVersion),
     ...preferTypes(pkg, pkgAst),
     ...shadowedTypes(pkg, pkgAst),
+    ...tsconfigBaseMatchingEngine(pkg, pkgAst),
     ...typesNodeMatchingEngine(pkg, pkgAst)
   ];
   if (messages.length === 0) {