oxlint-plugin-react-doctor 0.8.1-dev.b4556e3 → 0.8.1-dev.b852961

package/dist/index.d.ts

@@ -2421,6 +2421,29 @@ declare const REACT_DOCTOR_RULES: readonly [{
     readonly recommendationFor?: (hasCapability: CapabilityQuery) => string | undefined;
     readonly create: (context: RuleContext) => RuleVisitors;
   };
+}, {
+  readonly key: "react-doctor/jsx-no-target-blank";
+  readonly id: "jsx-no-target-blank";
+  readonly source: "react-doctor";
+  readonly originallyExternal: true;
+  readonly rule: {
+    readonly framework: "global";
+    readonly category: "Security";
+    readonly requires: readonly Capability[];
+    readonly id: string;
+    readonly title?: string;
+    readonly severity: RuleSeverity;
+    readonly disabledWhen?: ReadonlyArray<Capability>;
+    readonly tags?: ReadonlyArray<string>;
+    readonly matchByOccurrence?: boolean;
+    readonly defaultEnabled?: boolean;
+    readonly lifecycle?: "retired";
+    readonly scan?: FileScan;
+    readonly committedFilesOnly?: boolean;
+    readonly recommendation?: string;
+    readonly recommendationFor?: (hasCapability: CapabilityQuery) => string | undefined;
+    readonly create: (context: RuleContext) => RuleVisitors;
+  };
 }, {
   readonly key: "react-doctor/jsx-no-undef";
   readonly id: "jsx-no-undef";
@@ -11710,6 +11733,29 @@ declare const RULES: readonly [{
     readonly recommendationFor?: (hasCapability: CapabilityQuery) => string | undefined;
     readonly create: (context: RuleContext) => RuleVisitors;
   };
+}, {
+  readonly key: "react-doctor/jsx-no-target-blank";
+  readonly id: "jsx-no-target-blank";
+  readonly source: "react-doctor";
+  readonly originallyExternal: true;
+  readonly rule: {
+    readonly framework: "global";
+    readonly category: "Security";
+    readonly requires: readonly Capability[];
+    readonly id: string;
+    readonly title?: string;
+    readonly severity: RuleSeverity;
+    readonly disabledWhen?: ReadonlyArray<Capability>;
+    readonly tags?: ReadonlyArray<string>;
+    readonly matchByOccurrence?: boolean;
+    readonly defaultEnabled?: boolean;
+    readonly lifecycle?: "retired";
+    readonly scan?: FileScan;
+    readonly committedFilesOnly?: boolean;
+    readonly recommendation?: string;
+    readonly recommendationFor?: (hasCapability: CapabilityQuery) => string | undefined;
+    readonly create: (context: RuleContext) => RuleVisitors;
+  };
 }, {
   readonly key: "react-doctor/jsx-no-undef";
   readonly id: "jsx-no-undef";

package/dist/index.js

@@ -2622,7 +2622,7 @@ const PREFER_ALT = "Screen readers skip a decorative image more reliably with `a
 const MESSAGE_OBJECT = "Screen reader users cannot use this `<object>` because assistive tech cannot describe it, so add `alt`, `aria-label`, `aria-labelledby`, `title`, or inner fallback text.";
 const MESSAGE_AREA = "Blind users can't use this `<area>` of the image map because screen readers can't describe it, so add `alt`, `aria-label`, or `aria-labelledby`.";
 const MESSAGE_INPUT_IMAGE = "Blind users can't use this image button because screen readers can't describe it, so add `alt`, `aria-label`, or `aria-labelledby`.";
-const resolveSettings$52 = (settings) => {
+const resolveSettings$53 = (settings) => {
 	const reactDoctor = settings?.["react-doctor"];
 	return typeof reactDoctor === "object" && reactDoctor !== null ? reactDoctor.altText ?? {} : {};
 };
@@ -2745,7 +2745,7 @@ const altText = defineRule({
 	category: "Accessibility",
 	create: (context) => {
 		if (isGeneratedImageRenderContext(context)) return {};
-		const settings = resolveSettings$52(context.settings);
+		const settings = resolveSettings$53(context.settings);
 		const checkImg = !settings.elements || settings.elements.includes("img");
 		const checkObject = !settings.elements || settings.elements.includes("object");
 		const checkArea = !settings.elements || settings.elements.includes("area");
@@ -2807,7 +2807,7 @@ const DEFAULT_AMBIGUOUS = [
 	"a link",
 	"learn more"
 ];
-const resolveSettings$51 = (settings) => {
+const resolveSettings$52 = (settings) => {
 	const reactDoctor = settings?.["react-doctor"];
 	return { words: (typeof reactDoctor === "object" && reactDoctor !== null ? reactDoctor.anchorAmbiguousText ?? {} : {}).words ?? DEFAULT_AMBIGUOUS };
 };
@@ -2857,7 +2857,7 @@ const anchorAmbiguousText = defineRule({
 	category: "Accessibility",
 	create: (context) => {
 		if (isTestlikeFilename(context.filename)) return {};
-		const settings = resolveSettings$51(context.settings);
+		const settings = resolveSettings$52(context.settings);
 		const ambiguousSet = new Set(settings.words.map((word) => word.toLowerCase()));
 		return { JSXElement(node) {
 			if (getElementType(node.openingElement, context.settings) !== "a") return;
@@ -3225,7 +3225,7 @@ const anchorHasContent = defineRule({
 const MESSAGE_MISSING_HREF = "Keyboard users can't reach this link because it has no `href`, so add a real `href` (or use `<button>` for actions).";
 const MESSAGE_INCORRECT_HREF = "Keyboard users can't reach this link because its `href` goes nowhere (`#`, `javascript:`, or empty), so point it at a real destination.";
 const MESSAGE_CANT_BE_ANCHOR = "Keyboard users can't trigger this link because it's a click handler with no real `href`, so use `<button>` instead.";
-const resolveSettings$50 = (settings) => {
+const resolveSettings$51 = (settings) => {
 	const reactDoctor = settings?.["react-doctor"];
 	const ruleSettings = typeof reactDoctor === "object" && reactDoctor !== null ? reactDoctor.anchorIsValid ?? {} : {};
 	const jsxA11y = settings?.["jsx-a11y"];
@@ -3268,7 +3268,7 @@ const anchorIsValid = defineRule({
 	recommendation: "Give links a real destination. Use `<button>` for in-page actions.",
 	category: "Accessibility",
 	create: (context) => {
-		const settings = resolveSettings$50(context.settings);
+		const settings = resolveSettings$51(context.settings);
 		const fileHasJsxA11ySettings = hasJsxA11ySettings(context.settings);
 		const isTestlikeFile = isTestlikeFilename(context.filename);
 		return { JSXOpeningElement(node) {
@@ -4181,7 +4181,7 @@ const ariaProptypes = defineRule({
 //#endregion
 //#region src/plugin/rules/a11y/aria-role.ts
 const buildBaseMessage = (suffix) => `This \`role\` is not a valid ARIA role, so assistive tech cannot expose it correctly. Use a real, non-abstract role.${suffix}`;
-const resolveSettings$49 = (settings) => {
+const resolveSettings$50 = (settings) => {
 	const reactDoctor = settings?.["react-doctor"];
 	const ruleSettings = typeof reactDoctor === "object" && reactDoctor !== null ? reactDoctor.ariaRole ?? {} : {};
 	return {
@@ -4197,7 +4197,7 @@ const ariaRole = defineRule({
 	recommendation: "Use a real, non-abstract ARIA role so assistive tech can expose the element correctly.",
 	category: "Accessibility",
 	create: (context) => {
-		const settings = resolveSettings$49(context.settings);
+		const settings = resolveSettings$50(context.settings);
 		return { JSXOpeningElement(node) {
 			const roleAttribute = hasJsxPropIgnoreCase(node.attributes, "role");
 			if (!roleAttribute) return;
@@ -7115,7 +7115,7 @@ const FORM_CONTROL_TAGS = new Set([
 	"select",
 	"form"
 ]);
-const resolveSettings$48 = (settings) => {
+const resolveSettings$49 = (settings) => {
 	const reactDoctor = settings?.["react-doctor"];
 	const ruleSettings = typeof reactDoctor === "object" && reactDoctor !== null ? reactDoctor.autocompleteValid ?? {} : {};
 	return { inputComponents: new Set(ruleSettings.inputComponents ?? []) };
@@ -7128,7 +7128,7 @@ const autocompleteValid = defineRule({
 	recommendation: "Use a valid autofill token in `autoComplete` so browsers can fill the right field reliably.",
 	category: "Accessibility",
 	create: skipNonProductionFiles((context) => {
-		const settings = resolveSettings$48(context.settings);
+		const settings = resolveSettings$49(context.settings);
 		return { JSXOpeningElement: (node) => {
 			const tag = getElementType(node, context.settings);
 			if (!FORM_CONTROL_TAGS.has(tag) && !settings.inputComponents.has(tag)) return;
@@ -7247,7 +7247,7 @@ const isCreateElementCall = (node) => {
 //#region src/plugin/rules/react-builtins/button-has-type.ts
 const MISSING_MESSAGE$2 = "Your users can submit the form by accident because a `<button>` with no `type` defaults to submit.";
 const INVALID_MESSAGE = "This button has an invalid `type`, so the browser may treat it like a submit button.";
-const resolveSettings$47 = (settings) => {
+const resolveSettings$48 = (settings) => {
 	const reactDoctor = settings?.["react-doctor"];
 	const ruleSettings = typeof reactDoctor === "object" && reactDoctor !== null ? reactDoctor.buttonHasType ?? {} : {};
 	return {
@@ -7485,7 +7485,7 @@ const buttonHasType = defineRule({
 	severity: "warn",
 	recommendation: "Set an explicit button `type` so plain buttons do not submit forms by accident: `type=\"button\"`, `\"submit\"`, or `\"reset\"`.",
 	create: (context) => {
-		const settings = resolveSettings$47(context.settings);
+		const settings = resolveSettings$48(context.settings);
 		const isTestlikeFile = isTestlikeFilename(context.filename);
 		return {
 			JSXOpeningElement(node) {
@@ -7566,7 +7566,7 @@ const buttonHasType = defineRule({
 //#region src/plugin/rules/react-builtins/checked-requires-onchange-or-readonly.ts
 const MISSING_MESSAGE$1 = "Your users can't toggle this input because `checked` has no `onChange`.";
 const EXCLUSIVE_MESSAGE = "This input mixes `checked` with `defaultChecked`, so React can't tell whether it is controlled or uncontrolled.";
-const resolveSettings$46 = (settings) => {
+const resolveSettings$47 = (settings) => {
 	const reactDoctor = settings?.["react-doctor"];
 	const ruleSettings = typeof reactDoctor === "object" && reactDoctor !== null ? reactDoctor.checkedRequiresOnchangeOrReadonly ?? {} : {};
 	return {
@@ -7667,7 +7667,7 @@ const checkedRequiresOnchangeOrReadonly = defineRule({
 	recommendation: "Add `onChange`, `readOnly`, or `defaultChecked` so React knows whether the checkbox is editable, display-only, or uncontrolled.",
 	category: "Correctness",
 	create: (context) => {
-		const settings = resolveSettings$46(context.settings);
+		const settings = resolveSettings$47(context.settings);
 		const reportFromPresence = (presence) => {
 			if (presence.checkedNode && presence.defaultCheckedNode && !presence.bothCheckedAndDefaultForwarded && !settings.ignoreExclusiveCheckedAttribute) context.report({
 				node: presence.checkedNode,
@@ -10380,7 +10380,7 @@ const WRAPPER_LABEL_PROP = "label";
 const SELECT_ELEMENT = "select";
 const DEFAULT_DEPTH = 5;
 const MAX_DEPTH = 25;
-const resolveSettings$45 = (settings) => {
+const resolveSettings$46 = (settings) => {
 	const reactDoctor = settings?.["react-doctor"];
 	const ruleSettings = typeof reactDoctor === "object" && reactDoctor !== null ? reactDoctor.controlHasAssociatedLabel ?? {} : {};
 	return {
@@ -10713,7 +10713,7 @@ const controlHasAssociatedLabel = defineRule({
 	recommendation: "Give every interactive control a label screen readers can read.",
 	category: "Accessibility",
 	create: (context) => {
-		const settings = resolveSettings$45(context.settings);
+		const settings = resolveSettings$46(context.settings);
 		const isTestlikeFile = isTestlikeFilename(context.filename);
 		const iconComponentNames = /* @__PURE__ */ new Set();
 		const iconNamespaceNames = /* @__PURE__ */ new Set();
@@ -12665,7 +12665,7 @@ const DEFAULT_ADDITIONAL_HOCS = [
 	"lazy",
 	"withTracking"
 ];
-const resolveSettings$44 = (settings) => {
+const resolveSettings$45 = (settings) => {
 	const reactDoctor = settings?.["react-doctor"];
 	const ruleSettings = typeof reactDoctor === "object" && reactDoctor !== null ? reactDoctor.displayName ?? {} : {};
 	const additionalHoCs = new Set(ruleSettings.additionalHoCs ?? DEFAULT_ADDITIONAL_HOCS);
@@ -12847,7 +12847,7 @@ const displayName = defineRule({
 	recommendation: "Give each component a `displayName` so DevTools shows a clear name.",
 	category: "Architecture",
 	create: (context) => {
-		const settings = resolveSettings$44(context.settings);
+		const settings = resolveSettings$45(context.settings);
 		const ignoreNamed = !settings.ignoreTranspilerName;
 		const reportAt = (node) => {
 			context.report({
@@ -19016,7 +19016,7 @@ const compileGlob = (pattern) => {
 };
 //#endregion
 //#region src/plugin/rules/react-builtins/forbid-component-props.ts
-const resolveSettings$43 = (settings) => {
+const resolveSettings$44 = (settings) => {
 	const reactDoctor = settings?.["react-doctor"];
 	return { forbid: (typeof reactDoctor === "object" && reactDoctor !== null ? reactDoctor.forbidComponentProps ?? {} : {}).forbid ?? [] };
 };
@@ -19068,7 +19068,7 @@ const forbidComponentProps = defineRule({
 	recommendation: "Configure blocked component props so callers cannot bypass the component API contract.",
 	category: "Architecture",
 	create: (context) => {
-		const entries = resolveSettings$43(context.settings).forbid.map(normalizeEntry);
+		const entries = resolveSettings$44(context.settings).forbid.map(normalizeEntry);
 		return { JSXOpeningElement(node) {
 			if (entries.length === 0) return;
 			if (!isSupportedJsxName(node.name)) return;
@@ -19097,7 +19097,7 @@ const forbidComponentProps = defineRule({
 //#endregion
 //#region src/plugin/rules/react-builtins/forbid-dom-props.ts
 const buildMessage$24 = (propName, customMessage) => customMessage ?? `Your project blocks the \`${propName}\` prop on plain HTML tags, so this bypasses the agreed DOM API contract.`;
-const resolveSettings$42 = (settings) => {
+const resolveSettings$43 = (settings) => {
 	const reactDoctor = settings?.["react-doctor"];
 	const ruleSettings = typeof reactDoctor === "object" && reactDoctor !== null ? reactDoctor.forbidDomProps ?? {} : {};
 	const map = /* @__PURE__ */ new Map();
@@ -19119,7 +19119,7 @@ const forbidDomProps = defineRule({
 	recommendation: "Configure blocked DOM props so plain HTML tags stay on the agreed DOM API surface.",
 	category: "Architecture",
 	create: (context) => {
-		const forbidMap = resolveSettings$42(context.settings);
+		const forbidMap = resolveSettings$43(context.settings);
 		return { JSXOpeningElement(node) {
 			if (forbidMap.size === 0) return;
 			if (!isNodeOfType(node.name, "JSXIdentifier")) return;
@@ -19182,7 +19182,7 @@ const isReactFunctionCall = (node, expectedCall) => {
 //#endregion
 //#region src/plugin/rules/react-builtins/forbid-elements.ts
 const buildMessage$23 = (element, customHelp) => customHelp ? `Your project blocks \`<${element}>\` here. ${customHelp}` : `Your project blocks \`<${element}>\` here, so code stays on the approved UI surface.`;
-const resolveSettings$41 = (settings) => {
+const resolveSettings$42 = (settings) => {
 	const reactDoctor = settings?.["react-doctor"];
 	const ruleSettings = typeof reactDoctor === "object" && reactDoctor !== null ? reactDoctor.forbidElements ?? {} : {};
 	const map = /* @__PURE__ */ new Map();
@@ -19198,7 +19198,7 @@ const forbidElements = defineRule({
 	recommendation: "Configure blocked elements so code stays on the approved UI primitives.",
 	category: "Architecture",
 	create: (context) => {
-		const forbidMap = resolveSettings$41(context.settings);
+		const forbidMap = resolveSettings$42(context.settings);
 		return {
 			JSXOpeningElement(node) {
 				if (forbidMap.size === 0) return;
@@ -19307,7 +19307,7 @@ const DEFAULT_HEADING_TAGS = [
 	"h5",
 	"h6"
 ];
-const resolveSettings$40 = (settings) => {
+const resolveSettings$41 = (settings) => {
 	const reactDoctor = settings?.["react-doctor"];
 	const ruleSettings = typeof reactDoctor === "object" && reactDoctor !== null ? reactDoctor.headingHasContent ?? {} : {};
 	return { headingTags: new Set([...DEFAULT_HEADING_TAGS, ...ruleSettings.components ?? []]) };
@@ -19320,7 +19320,7 @@ const headingHasContent = defineRule({
 	recommendation: "Put readable text in every heading.",
 	category: "Accessibility",
 	create: (context) => {
-		const settings = resolveSettings$40(context.settings);
+		const settings = resolveSettings$41(context.settings);
 		return { JSXOpeningElement(node) {
 			const elementType = getElementType(node, context.settings);
 			if (!settings.headingTags.has(elementType)) return;
@@ -19341,7 +19341,7 @@ const headingHasContent = defineRule({
 //#region src/plugin/rules/react-builtins/hook-use-state.ts
 const REQUIRE_DESTRUCTURE_MESSAGE = "`useState` should be destructured as `[value, setValue]` so readers can see the state value and setter together.";
 const NAMING_CONVENTION_MESSAGE = "This `useState` setter does not match its value name, so updates are harder to trace.";
-const resolveSettings$39 = (settings) => {
+const resolveSettings$40 = (settings) => {
 	const reactDoctor = settings?.["react-doctor"];
 	return { allowDestructuredState: (typeof reactDoctor === "object" && reactDoctor !== null ? reactDoctor.hookUseState ?? {} : {}).allowDestructuredState ?? false };
 };
@@ -19368,7 +19368,7 @@ const hookUseState = defineRule({
 	recommendation: "Destructure `useState` as `const [thing, setThing] = useState(…)` so state reads and writes stay visible together.",
 	category: "Architecture",
 	create: (context) => {
-		const { allowDestructuredState } = resolveSettings$39(context.settings);
+		const { allowDestructuredState } = resolveSettings$40(context.settings);
 		return { CallExpression(node) {
 			const callExpressionNode = node;
 			if (!isReactFunctionCall(callExpressionNode, "useState")) return;
@@ -19501,7 +19501,7 @@ const hooksNoNanInDeps = defineRule({
 //#endregion
 //#region src/plugin/rules/a11y/html-has-lang.ts
 const MESSAGE$52 = "Screen readers may mispronounce this page because it doesn't declare a language, so add a `lang` attribute like `en`.";
-const resolveSettings$38 = (settings) => {
+const resolveSettings$39 = (settings) => {
 	const reactDoctor = settings?.["react-doctor"];
 	return { htmlTags: (typeof reactDoctor === "object" && reactDoctor !== null ? reactDoctor.htmlHasLang ?? {} : {}).htmlTags ?? ["html"] };
 };
@@ -19538,7 +19538,7 @@ const htmlHasLang = defineRule({
 	recommendation: "Set `<html lang=\"…\">` so screen readers know the page language.",
 	category: "Accessibility",
 	create: (context) => {
-		const settings = resolveSettings$38(context.settings);
+		const settings = resolveSettings$39(context.settings);
 		const tagSet = new Set(settings.htmlTags);
 		return { JSXOpeningElement(node) {
 			const tag = getElementType(node, context.settings);
@@ -20054,7 +20054,7 @@ const DEFAULT_REDUNDANT_WORDS = [
 	"photo",
 	"picture"
 ];
-const resolveSettings$37 = (settings) => {
+const resolveSettings$38 = (settings) => {
 	const reactDoctor = settings?.["react-doctor"];
 	const ruleSettings = typeof reactDoctor === "object" && reactDoctor !== null ? reactDoctor.imgRedundantAlt ?? {} : {};
 	return {
@@ -20102,7 +20102,7 @@ const imgRedundantAlt = defineRule({
 	category: "Accessibility",
 	create: (context) => {
 		if (isGeneratedImageRenderContext(context)) return {};
-		const settings = resolveSettings$37(context.settings);
+		const settings = resolveSettings$38(context.settings);
 		return { JSXOpeningElement(node) {
 			const tag = getElementType(node, context.settings);
 			if (!settings.components.includes(tag)) return;
@@ -20410,7 +20410,7 @@ const COMPOSITE_ITEM_ROLES = new Set([
 	"row",
 	"gridcell"
 ]);
-const resolveSettings$36 = (settings) => {
+const resolveSettings$37 = (settings) => {
 	const reactDoctor = settings?.["react-doctor"];
 	return { tabbable: (typeof reactDoctor === "object" && reactDoctor !== null ? reactDoctor.interactiveSupportsFocus ?? {} : {}).tabbable ?? DEFAULT_TABBABLE_ROLES };
 };
@@ -20422,7 +20422,7 @@ const interactiveSupportsFocus = defineRule({
 	recommendation: "Add keyboard focus support so users can reach interactive elements without a pointer.",
 	category: "Accessibility",
 	create: (context) => {
-		const settings = resolveSettings$36(context.settings);
+		const settings = resolveSettings$37(context.settings);
 		const tabbableSet = new Set(settings.tabbable);
 		return { JSXOpeningElement(node) {
 			if (isLocalTestScaffoldJsx(node, context)) return;
@@ -23718,7 +23718,7 @@ const jsTosortedImmutable = defineRule({
 const NEVER_MESSAGE$2 = () => "This boolean prop style disagrees with the project setting, so equivalent true props are harder to scan consistently.";
 const ALWAYS_MESSAGE$2 = () => "This boolean prop style disagrees with the project setting, so equivalent true props are harder to scan consistently.";
 const FALSE_OMITTED_MESSAGE = (attributeName) => `\`${attributeName}={false}\` does nothing, so the explicit false value adds noise without changing output.`;
-const resolveSettings$35 = (settings) => {
+const resolveSettings$36 = (settings) => {
 	const reactDoctor = settings?.["react-doctor"];
 	const ruleSettings = typeof reactDoctor === "object" && reactDoctor !== null ? reactDoctor.jsxBooleanValue ?? {} : {};
 	return {
@@ -23736,7 +23736,7 @@ const jsxBooleanValue = defineRule({
 	recommendation: "Use one boolean-attribute style so equivalent true props scan the same across the codebase.",
 	category: "Architecture",
 	create: (context) => {
-		const settings = resolveSettings$35(context.settings);
+		const settings = resolveSettings$36(context.settings);
 		const alwaysSet = new Set(settings.always);
 		const neverSet = new Set(settings.never);
 		return { JSXAttribute(node) {
@@ -23790,7 +23790,7 @@ const jsxBooleanValue = defineRule({
 const UNNECESSARY_BRACES_MESSAGE = "These curly braces wrap a literal value, so they add JSX noise without changing output.";
 const REQUIRED_BRACES_MESSAGE = "This JSX value needs `{ }` so React reads it as an expression instead of text.";
 const isAllowedMode = (value) => value === "always" || value === "never" || value === "ignore";
-const resolveSettings$34 = (settings) => {
+const resolveSettings$35 = (settings) => {
 	const reactDoctor = settings?.["react-doctor"];
 	const ruleSettingsRaw = typeof reactDoctor === "object" && reactDoctor !== null ? reactDoctor.jsxCurlyBracePresence : void 0;
 	if (isAllowedMode(ruleSettingsRaw)) return {
@@ -23886,7 +23886,7 @@ const jsxCurlyBracePresence = defineRule({
 	recommendation: "Use one JSX literal style so equivalent markup scans the same without extra JSX noise.",
 	category: "Architecture",
 	create: (context) => {
-		const settings = resolveSettings$34(context.settings);
+		const settings = resolveSettings$35(context.settings);
 		return {
 			JSXAttribute(node) {
 				const value = node.value;
@@ -23969,7 +23969,7 @@ const containsJsxElement = (root) => {
 //#region src/plugin/rules/react-builtins/jsx-filename-extension.ts
 const JSX_NOT_ALLOWED = (extension) => `This file contains JSX but uses a \`${extension}\` name, so the filename no longer signals JSX to readers or tooling conventions.`;
 const EXTENSION_ONLY_FOR_JSX = (extension) => `\`${extension}\` files are reserved for JSX here, so using that extension without JSX makes file-type conventions less useful.`;
-const resolveSettings$33 = (settings) => {
+const resolveSettings$34 = (settings) => {
 	const reactDoctor = settings?.["react-doctor"];
 	const ruleSettings = typeof reactDoctor === "object" && reactDoctor !== null ? reactDoctor.jsxFilenameExtension ?? {} : {};
 	return {
@@ -23991,7 +23991,7 @@ const jsxFilenameExtension = defineRule({
 	recommendation: "Name JSX files with the configured extension so file names accurately signal which files contain JSX.",
 	category: "Architecture",
 	create: (context) => {
-		const settings = resolveSettings$33(context.settings);
+		const settings = resolveSettings$34(context.settings);
 		const allowedExtensions = normalizeExtensions(settings.extensions);
 		const filename = normalizeFilename(context.filename ?? "fixture.tsx");
 		const extensionOnly = path.extname(filename).slice(1);
@@ -24032,7 +24032,7 @@ const jsxFilenameExtension = defineRule({
 //#region src/plugin/rules/react-builtins/jsx-fragments.ts
 const SYNTAX_MESSAGE = "`<React.Fragment>` is used where shorthand fragments are configured, so similar wrappers look different across the codebase.";
 const ELEMENT_MESSAGE = "Fragment shorthand is used where explicit fragments are configured, so similar wrappers look different across the codebase.";
-const resolveSettings$32 = (settings) => {
+const resolveSettings$33 = (settings) => {
 	const reactDoctor = settings?.["react-doctor"];
 	return { mode: (typeof reactDoctor === "object" && reactDoctor !== null ? reactDoctor.jsxFragments ?? {} : {}).mode ?? "syntax" };
 };
@@ -24044,7 +24044,7 @@ const jsxFragments = defineRule({
 	recommendation: "Use one fragment style so identical wrappers do not look different across files.",
 	category: "Architecture",
 	create: (context) => {
-		const { mode } = resolveSettings$32(context.settings);
+		const { mode } = resolveSettings$33(context.settings);
 		return {
 			JSXElement(node) {
 				if (mode !== "syntax") return;
@@ -24088,7 +24088,7 @@ const buildPropRegex = (handlerPropPrefix) => {
 	const escaped = tokens.map((token) => token.replace(/[.+?^${}()|[\]\\]/g, "\\$&")).join("|");
 	return new RegExp(`^(${escaped})[A-Z].*$`);
 };
-const resolveSettings$31 = (settings) => {
+const resolveSettings$32 = (settings) => {
 	const reactDoctor = settings?.["react-doctor"];
 	const ruleSettings = typeof reactDoctor === "object" && reactDoctor !== null ? reactDoctor.jsxHandlerNames ?? {} : {};
 	let handlerPrefix = DEFAULT_HANDLER_PREFIX;
@@ -24164,7 +24164,7 @@ const jsxHandlerNames = defineRule({
 	recommendation: "Use the `on…` prefix for event-handler props and `handle…` for handlers so readers can trace event flow.",
 	category: "Architecture",
 	create: (context) => {
-		const settings = resolveSettings$31(context.settings);
+		const settings = resolveSettings$32(context.settings);
 		return { JSXAttribute(node) {
 			if (settings.ignoreComponentNames.length > 0) {
 				const opening = node.parent;
@@ -24239,19 +24239,6 @@ const hasJsxKeyAttribute = (openingElement) => {
 	return false;
 };
 //#endregion
-//#region src/plugin/utils/is-component-function.ts
-const isFunctionAssignedToComponent = (functionNode) => {
-	let cursor = functionNode.parent ?? null;
-	while (isNodeOfType(cursor, "CallExpression")) cursor = cursor.parent ?? null;
-	if (isNodeOfType(cursor, "VariableDeclarator") && isNodeOfType(cursor.id, "Identifier") && isUppercaseName(cursor.id.name)) return true;
-	return isNodeOfType(cursor, "ExportDefaultDeclaration");
-};
-const isComponentFunction$1 = (node) => {
-	if (!isFunctionLike$1(node)) return false;
-	if (isNodeOfType(node, "FunctionDeclaration")) return !node.id || node.id.name === "default" || isUppercaseName(node.id.name) || isNodeOfType(node.parent, "ExportDefaultDeclaration");
-	return isFunctionAssignedToComponent(node);
-};
-//#endregion
 //#region src/plugin/utils/is-const-declared-binding.ts
 const BINDING_PATTERN_ANCESTOR_TYPES = new Set([
 	"VariableDeclarator",
@@ -24296,17 +24283,11 @@ const ITERATOR_METHOD_NAMES$1 = new Set([
 	"flatMap",
 	"from"
 ]);
-const RENDERING_CALL_NAMES = new Set([
-	"createPortal",
-	"hydrate",
-	"hydrateRoot",
-	"render"
-]);
 const MISSING_KEY_ARRAY = "Your users can see the wrong data when this array reorders.";
 const MISSING_KEY_ITERATOR = "Your users can see the wrong data when this list reorders.";
-const KEY_BEFORE_SPREAD = "Place this `key` after the `{...spread}` so the spread cannot override it.";
+const KEY_AFTER_SPREAD = "Place this `key` before the `{...spread}` so the JSX transform can always extract it.";
 const DUPLICATE_KEY = (keyValue) => `Your users can see the wrong data because two elements share the key "${keyValue}".`;
-const resolveSettings$30 = (settings) => {
+const resolveSettings$31 = (settings) => {
 	const reactDoctor = settings?.["react-doctor"];
 	const ruleSettings = typeof reactDoctor === "object" && reactDoctor !== null ? reactDoctor.jsxKey ?? {} : {};
 	return {
@@ -24320,33 +24301,6 @@ const findArrayVariableDeclarator = (arrayExpression) => {
 	if (ancestor && isNodeOfType(ancestor, "VariableDeclarator") && ancestor.init === wrapped && isNodeOfType(ancestor.id, "Identifier")) return ancestor;
 	return null;
 };
-const isArrayNestedInObjectProperty = (arrayExpression) => {
-	let current = findTransparentExpressionRoot(arrayExpression);
-	while (current.parent) {
-		const parent = current.parent;
-		if (isNodeOfType(parent, "ConditionalExpression") && (parent.consequent === current || parent.alternate === current) || isNodeOfType(parent, "LogicalExpression") && (parent.left === current || parent.right === current)) {
-			current = findTransparentExpressionRoot(parent);
-			continue;
-		}
-		return isNodeOfType(parent, "Property") && parent.value === current;
-	}
-	return false;
-};
-const isArrayPassedToNonRenderingCall = (arrayExpression, scopes) => {
-	const transparentArray = findTransparentExpressionRoot(arrayExpression);
-	const callExpression = transparentArray.parent;
-	if (!callExpression || !isNodeOfType(callExpression, "CallExpression") || !callExpression.arguments.some((argument) => argument === transparentArray)) return false;
-	const argumentIndex = callExpression.arguments.findIndex((argument) => argument === transparentArray);
-	if (isReactApiCall(callExpression, "createElement", scopes, {
-		allowGlobalReactNamespace: true,
-		allowUnboundBareCalls: true,
-		resolveNamedAliases: true
-	})) return argumentIndex < 2;
-	const callee = stripParenExpression(callExpression.callee);
-	if (isNodeOfType(callee, "Identifier")) return !RENDERING_CALL_NAMES.has(callee.name);
-	if (isNodeOfType(callee, "MemberExpression") && !callee.computed && isNodeOfType(callee.property, "Identifier")) return !RENDERING_CALL_NAMES.has(callee.property.name);
-	return true;
-};
 const isIdentityIteratorCallback = (callback) => {
 	const callbackFunction = stripParenExpression(callback);
 	if (!isNodeOfType(callbackFunction, "ArrowFunctionExpression") && !isNodeOfType(callbackFunction, "FunctionExpression")) return true;
@@ -24443,7 +24397,7 @@ const findNamedCallbackIteratorCall = (functionNode) => {
 	namedCallbackIteratorCallCache.set(functionNode, iteratorCall);
 	return iteratorCall;
 };
-const findEnclosingIteratorContext = (jsxNode, scopes) => {
+const findEnclosingIteratorContext = (jsxNode) => {
 	let current = jsxNode;
 	let isOutsideContainingFunction = false;
 	let didSeeReturnStatement = false;
@@ -24465,8 +24419,6 @@ const findEnclosingIteratorContext = (jsxNode, scopes) => {
 			isOutsideContainingFunction = true;
 		} else if (isNodeOfType(parent, "ArrayExpression")) {
 			if (isOutsideContainingFunction) return null;
-			if (isArrayNestedInObjectProperty(parent)) return null;
-			if (isArrayPassedToNonRenderingCall(parent, scopes)) return null;
 			const arrayParent = parent.parent;
 			if (arrayParent && isNodeOfType(arrayParent, "Property")) return null;
 			if (arrayParent && isNodeOfType(arrayParent, "ArrayExpression")) return null;
@@ -24548,15 +24500,9 @@ const isWithinChildrenToArray = (jsxNode) => {
 const isKeyPropertyName = (propertyKey) => {
 	if (isNodeOfType(propertyKey, "Identifier")) return propertyKey.name === "key";
 	if (isNodeOfType(propertyKey, "Literal")) return String(propertyKey.value) === "key";
-	return false;
+	return true;
 };
 const isThisPropsMember = (expression) => isNodeOfType(expression, "MemberExpression") && !expression.computed && isNodeOfType(expression.object, "ThisExpression") && isNodeOfType(expression.property, "Identifier") && expression.property.name === "props";
-const isDirectComponentPropsParameter = (bindingIdentifier, functionNode) => {
-	if (!isFunctionLike$1(functionNode) || !isComponentFunction$1(functionNode)) return false;
-	const firstParameter = functionNode.params?.[0];
-	if (!firstParameter) return false;
-	return (isNodeOfType(firstParameter, "AssignmentPattern") ? firstParameter.left : firstParameter) === bindingIdentifier;
-};
 const isFunctionParameterPropsRest = (bindingIdentifier) => {
 	const restElement = bindingIdentifier.parent;
 	if (!restElement || !isNodeOfType(restElement, "RestElement")) return false;
@@ -24566,7 +24512,7 @@ const isFunctionParameterPropsRest = (bindingIdentifier) => {
 	const parameterNode = patternParent && isNodeOfType(patternParent, "AssignmentPattern") && patternParent.left === objectPattern ? patternParent : objectPattern;
 	const functionNode = parameterNode.parent;
 	if (!functionNode || !isNodeOfType(functionNode, "ArrowFunctionExpression") && !isNodeOfType(functionNode, "FunctionExpression") && !isNodeOfType(functionNode, "FunctionDeclaration")) return false;
-	return isComponentFunction$1(functionNode) && functionNode.params[0] === parameterNode;
+	return functionNode.params.some((param) => param === parameterNode);
 };
 const isRestBindingWithKeyExtracted = (bindingIdentifier) => {
 	const restElement = bindingIdentifier.parent;
@@ -24579,14 +24525,14 @@ const isRestBindingWithKeyExtracted = (bindingIdentifier) => {
 	}
 	return false;
 };
-const isBindingAssignedKey = (scopeOwner, bindingName) => {
-	let didFindKeyAssignment = false;
+const isBindingObjectMutated = (scopeOwner, bindingName) => {
+	let didFindMutation = false;
 	walkAst(scopeOwner, (node) => {
-		if (didFindKeyAssignment) return false;
+		if (didFindMutation) return false;
 		if (isNodeOfType(node, "AssignmentExpression") && isNodeOfType(node.left, "MemberExpression")) {
 			const assignedObject = stripParenExpression(node.left.object);
-			if (isNodeOfType(assignedObject, "Identifier") && assignedObject.name === bindingName && isKeyPropertyName(node.left.property)) {
-				didFindKeyAssignment = true;
+			if (isNodeOfType(assignedObject, "Identifier") && assignedObject.name === bindingName) {
+				didFindMutation = true;
 				return false;
 			}
 		}
@@ -24594,63 +24540,59 @@ const isBindingAssignedKey = (scopeOwner, bindingName) => {
 			const callee = node.callee;
 			if (isNodeOfType(callee, "MemberExpression") && isNodeOfType(callee.object, "Identifier") && callee.object.name === "Object" && isNodeOfType(callee.property, "Identifier") && callee.property.name === "assign") {
 				const firstArgument = node.arguments[0];
-				if (firstArgument && isNodeOfType(firstArgument, "Identifier") && firstArgument.name === bindingName) for (const sourceArgument of node.arguments.slice(1)) {
-					const source = stripParenExpression(sourceArgument);
-					if (!isNodeOfType(source, "ObjectExpression")) continue;
-					if (source.properties.some((property) => isNodeOfType(property, "Property") && isKeyPropertyName(property.key))) {
-						didFindKeyAssignment = true;
-						return false;
-					}
+				if (firstArgument && isNodeOfType(firstArgument, "Identifier") && firstArgument.name === bindingName) {
+					didFindMutation = true;
+					return false;
 				}
 			}
 		}
 	});
-	return didFindKeyAssignment;
+	return didFindMutation;
 };
-const spreadExpressionHasKey = (expression, depth) => {
+const spreadExpressionCanCarryKey = (expression, depth) => {
 	const inner = stripParenExpression(expression);
 	if (isNodeOfType(inner, "ObjectExpression")) {
 		for (const property of inner.properties) {
 			if (isNodeOfType(property, "SpreadElement")) {
-				if (depth >= 3) continue;
-				if (spreadExpressionHasKey(property.argument, depth + 1)) return true;
+				if (depth >= 3) return true;
+				if (spreadExpressionCanCarryKey(property.argument, depth + 1)) return true;
 				continue;
 			}
-			if (!isNodeOfType(property, "Property")) continue;
+			if (!isNodeOfType(property, "Property")) return true;
+			if (property.computed) return true;
 			if (isKeyPropertyName(property.key)) return true;
 		}
 		return false;
 	}
 	if (isNodeOfType(inner, "ConditionalExpression")) {
-		if (depth >= 3) return false;
-		return spreadExpressionHasKey(inner.consequent, depth + 1) || spreadExpressionHasKey(inner.alternate, depth + 1);
+		if (depth >= 3) return true;
+		return spreadExpressionCanCarryKey(inner.consequent, depth + 1) || spreadExpressionCanCarryKey(inner.alternate, depth + 1);
 	}
 	if (isNodeOfType(inner, "LogicalExpression")) {
-		if (depth >= 3) return false;
-		if (inner.operator === "&&") return spreadExpressionHasKey(inner.right, depth + 1);
-		return spreadExpressionHasKey(inner.left, depth + 1) || spreadExpressionHasKey(inner.right, depth + 1);
+		if (depth >= 3) return true;
+		if (inner.operator === "&&") return spreadExpressionCanCarryKey(inner.right, depth + 1);
+		return spreadExpressionCanCarryKey(inner.left, depth + 1) || spreadExpressionCanCarryKey(inner.right, depth + 1);
 	}
 	if (isNodeOfType(inner, "Literal")) return false;
 	if (isThisPropsMember(inner)) return false;
 	if (isNodeOfType(inner, "Identifier")) {
 		if (inner.name === "undefined") return false;
-		if (depth >= 3) return false;
+		if (depth >= 3) return true;
 		const binding = findVariableInitializer(inner, inner.name);
-		if (!binding) return false;
+		if (!binding) return true;
 		if (isRestBindingWithKeyExtracted(binding.bindingIdentifier)) return false;
 		if (isFunctionParameterPropsRest(binding.bindingIdentifier)) return false;
-		if (isDirectComponentPropsParameter(binding.bindingIdentifier, binding.scopeOwner)) return false;
-		if (!isConstDeclaredBinding(binding) || !binding.initializer) return false;
-		if (isBindingAssignedKey(binding.scopeOwner, inner.name)) return true;
-		return spreadExpressionHasKey(binding.initializer, depth + 1);
+		if (!isConstDeclaredBinding(binding) || !binding.initializer) return true;
+		if (isBindingObjectMutated(binding.scopeOwner, inner.name)) return true;
+		return spreadExpressionCanCarryKey(binding.initializer, depth + 1);
 	}
-	return false;
+	return true;
 };
-const spreadCanOverwriteKey = (spreadAttribute) => spreadExpressionHasKey(spreadAttribute.argument, 0);
+const spreadCanOverwriteKey = (spreadAttribute) => spreadExpressionCanCarryKey(spreadAttribute.argument, 0);
 const checkKeyBeforeSpread = (context, openingElement) => {
 	let keyIndex = null;
 	let keyAttribute = null;
-	let lastKeyCarryingSpreadIndex = null;
+	let firstKeyCarryingSpreadIndex = null;
 	for (let attributeIndex = 0; attributeIndex < openingElement.attributes.length; attributeIndex++) {
 		const attribute = openingElement.attributes[attributeIndex];
 		if (isNodeOfType(attribute, "JSXAttribute")) {
@@ -24658,11 +24600,11 @@ const checkKeyBeforeSpread = (context, openingElement) => {
 				keyIndex = attributeIndex;
 				keyAttribute = attribute;
 			}
-		} else if (isNodeOfType(attribute, "JSXSpreadAttribute") && spreadCanOverwriteKey(attribute)) lastKeyCarryingSpreadIndex = attributeIndex;
+		} else if (isNodeOfType(attribute, "JSXSpreadAttribute") && firstKeyCarryingSpreadIndex === null && spreadCanOverwriteKey(attribute)) firstKeyCarryingSpreadIndex = attributeIndex;
 	}
-	if (keyIndex !== null && lastKeyCarryingSpreadIndex !== null && lastKeyCarryingSpreadIndex > keyIndex && keyAttribute) context.report({
+	if (keyIndex !== null && firstKeyCarryingSpreadIndex !== null && firstKeyCarryingSpreadIndex < keyIndex && keyAttribute) context.report({
 		node: keyAttribute,
-		message: KEY_BEFORE_SPREAD
+		message: KEY_AFTER_SPREAD
 	});
 };
 const getKeyAttributeValueString = (openingElement) => {
@@ -24706,7 +24648,7 @@ const jsxKey = defineRule({
 	severity: "error",
 	recommendation: "Add a stable `key` prop so React can keep list items matched to the right data when the list changes.",
 	create: (context) => {
-		const settings = resolveSettings$30(context.settings);
+		const settings = resolveSettings$31(context.settings);
 		return {
 			JSXElement(node) {
 				const openingElement = node.openingElement;
@@ -24724,7 +24666,7 @@ const jsxKey = defineRule({
 						else seenKeys.add(keyValue.keyValue);
 					}
 				}
-				const enclosingContext = findEnclosingIteratorContext(node, context.scopes);
+				const enclosingContext = findEnclosingIteratorContext(node);
 				if (!enclosingContext) return;
 				if (isWithinChildrenToArray(node)) return;
 				if (hasJsxKeyAttribute(openingElement)) return;
@@ -24760,7 +24702,7 @@ const jsxKey = defineRule({
 //#region src/plugin/rules/react-builtins/jsx-max-depth.ts
 const buildMessage$19 = (depth, max) => `This JSX is hard to read at ${depth} levels deep, past the limit of ${max}.`;
 const DEFAULT_MAX_DEPTH = 14;
-const resolveSettings$29 = (settings) => {
+const resolveSettings$30 = (settings) => {
 	const reactDoctor = settings?.["react-doctor"];
 	return { max: (typeof reactDoctor === "object" && reactDoctor !== null ? reactDoctor.jsxMaxDepth ?? {} : {}).max ?? DEFAULT_MAX_DEPTH };
 };
@@ -24829,7 +24771,7 @@ const jsxMaxDepth = defineRule({
 	recommendation: "Pull deeply nested JSX into smaller components so it's easier to read.",
 	category: "Architecture",
 	create: (context) => {
-		const { max } = resolveSettings$29(context.settings);
+		const { max } = resolveSettings$30(context.settings);
 		const deepestLeafPerTree = /* @__PURE__ */ new Map();
 		const checkNode = (node) => {
 			if (!isLeafJsxNode(node)) return;
@@ -26801,7 +26743,7 @@ const jsxNoNewObjectAsProp = defineRule({
 //#region src/plugin/rules/react-builtins/jsx-no-script-url.ts
 const MESSAGE$43 = "A `javascript:` URL is an XSS hole that runs injected input as code.";
 const JAVASCRIPT_URL_PATTERN = /^[\u0000-\u001F ]*j[\r\n\t]*a[\r\n\t]*v[\r\n\t]*a[\r\n\t]*s[\r\n\t]*c[\r\n\t]*r[\r\n\t]*i[\r\n\t]*p[\r\n\t]*t[\r\n\t]*:/i;
-const resolveSettings$28 = (settings) => {
+const resolveSettings$29 = (settings) => {
 	const reactDoctor = settings?.["react-doctor"];
 	if (typeof reactDoctor !== "object" || reactDoctor === null) return {};
 	return reactDoctor.jsxNoScriptUrl ?? {};
@@ -26823,7 +26765,7 @@ const jsxNoScriptUrl = defineRule({
 	recommendation: "Use real event handlers instead of `javascript:` URLs so injected URL text cannot execute as code.",
 	category: "Security",
 	create: (context) => {
-		const options = resolveSettings$28(context.settings);
+		const options = resolveSettings$29(context.settings);
 		return { JSXOpeningElement(node) {
 			if (!isNodeOfType(node.name, "JSXIdentifier")) return;
 			const elementName = resolveJsxElementType(node);
@@ -26844,6 +26786,283 @@ const jsxNoScriptUrl = defineRule({
 	}
 });
 //#endregion
+//#region src/plugin/rules/react-builtins/jsx-no-target-blank.ts
+const NOREFERRER_MESSAGE = "`target=\"_blank\"` without `rel=\"noreferrer\"` lets the linked page hijack your tab to a phishing site.";
+const NOOPENER_MESSAGE = "`target=\"_blank\"` without `rel` lets the linked page hijack your tab to a phishing site.";
+const SPREAD_MESSAGE = "A spread here can add `target=\"_blank\"`, letting the linked page hijack your tab to a phishing site.";
+const resolveSettings$28 = (settings) => {
+	const reactDoctor = settings?.["react-doctor"];
+	const ruleSettings = typeof reactDoctor === "object" && reactDoctor !== null ? reactDoctor.jsxNoTargetBlank ?? {} : {};
+	const reactSettings = typeof settings?.react === "object" && settings.react !== null ? settings.react : {};
+	const linkComponents = /* @__PURE__ */ new Map();
+	for (const entry of reactSettings.linkComponents ?? []) if (typeof entry === "string") linkComponents.set(entry, ["href"]);
+	else if (typeof entry === "object" && entry !== null) {
+		const linkAttribute = entry.linkAttribute ?? "href";
+		linkComponents.set(entry.name, Array.isArray(linkAttribute) ? linkAttribute : [linkAttribute]);
+	}
+	const formComponents = /* @__PURE__ */ new Map();
+	for (const entry of reactSettings.formComponents ?? []) if (typeof entry === "string") formComponents.set(entry, ["action"]);
+	else if (typeof entry === "object" && entry !== null) {
+		const formAttribute = entry.formAttribute ?? "action";
+		formComponents.set(entry.name, Array.isArray(formAttribute) ? formAttribute : [formAttribute]);
+	}
+	return {
+		enforceDynamicLinks: ruleSettings.enforceDynamicLinks ?? "always",
+		warnOnSpreadAttributes: ruleSettings.warnOnSpreadAttributes ?? false,
+		allowReferrer: ruleSettings.allowReferrer ?? false,
+		links: ruleSettings.links ?? true,
+		forms: ruleSettings.forms ?? false,
+		linkComponents,
+		formComponents
+	};
+};
+const isExternalLink = (href) => href.includes("//");
+const matchHrefExpression = (expression, state) => {
+	if (isNodeOfType(expression, "Literal") && typeof expression.value === "string") {
+		if (isExternalLink(expression.value)) state.isExternal = true;
+		return;
+	}
+	if (isNodeOfType(expression, "Identifier")) {
+		state.isDynamic = true;
+		return;
+	}
+	if (isNodeOfType(expression, "ConditionalExpression")) {
+		matchHrefExpression(expression.consequent, state);
+		matchHrefExpression(expression.alternate, state);
+	}
+};
+const checkHref = (attributeValue, enforceDynamicLinks) => {
+	const state = {
+		isExternal: false,
+		isDynamic: false
+	};
+	if (isNodeOfType(attributeValue, "Literal") && typeof attributeValue.value === "string") state.isExternal = isExternalLink(attributeValue.value);
+	else if (isNodeOfType(attributeValue, "JSXExpressionContainer")) matchHrefExpression(attributeValue.expression, state);
+	if (enforceDynamicLinks === "never") return !state.isExternal || state.isDynamic;
+	return !(state.isExternal || state.isDynamic);
+};
+const checkRelValue = (text, allowReferrer) => {
+	const tokens = text.split(/\s+/);
+	if (allowReferrer) return tokens.includes("noopener") || tokens.includes("noreferrer");
+	return tokens.some((token) => token.toLowerCase() === "noreferrer");
+};
+const matchRelExpression = (expression, allowReferrer) => {
+	const empty = {
+		combined: false,
+		testName: "",
+		consequent: false,
+		alternate: false
+	};
+	if (isNodeOfType(expression, "Literal") && typeof expression.value === "string") return {
+		combined: checkRelValue(expression.value, allowReferrer),
+		testName: "",
+		consequent: false,
+		alternate: false
+	};
+	if (isNodeOfType(expression, "ConditionalExpression")) {
+		const consequent = matchRelExpression(expression.consequent, allowReferrer);
+		const alternate = matchRelExpression(expression.alternate, allowReferrer);
+		const test = expression.test;
+		if (isNodeOfType(test, "Identifier")) return {
+			combined: consequent.combined && alternate.combined,
+			testName: test.name,
+			consequent: consequent.combined,
+			alternate: alternate.combined
+		};
+		return {
+			combined: consequent.combined && alternate.combined,
+			testName: "",
+			consequent: consequent.combined,
+			alternate: alternate.combined
+		};
+	}
+	return empty;
+};
+const checkRel = (attributeValue, allowReferrer) => {
+	const empty = {
+		combined: false,
+		testName: "",
+		consequent: false,
+		alternate: false
+	};
+	if (isNodeOfType(attributeValue, "Literal") && typeof attributeValue.value === "string") return {
+		combined: checkRelValue(attributeValue.value, allowReferrer),
+		testName: "",
+		consequent: false,
+		alternate: false
+	};
+	if (isNodeOfType(attributeValue, "JSXExpressionContainer")) {
+		const expression = attributeValue.expression;
+		if (expression.type === "JSXEmptyExpression") return empty;
+		return matchRelExpression(expression, allowReferrer);
+	}
+	return empty;
+};
+const matchTargetExpression = (expression) => {
+	const empty = {
+		combined: false,
+		testName: "",
+		consequent: false,
+		alternate: false
+	};
+	if (isNodeOfType(expression, "Literal") && typeof expression.value === "string") return {
+		combined: expression.value.toLowerCase() === "_blank",
+		testName: "",
+		consequent: false,
+		alternate: false
+	};
+	if (isNodeOfType(expression, "ConditionalExpression")) {
+		const consequent = matchTargetExpression(expression.consequent);
+		const alternate = matchTargetExpression(expression.alternate);
+		const test = expression.test;
+		const combined = consequent.combined || alternate.combined;
+		if (isNodeOfType(test, "Identifier")) return {
+			combined,
+			testName: test.name,
+			consequent: consequent.combined,
+			alternate: alternate.combined
+		};
+		return {
+			combined,
+			testName: "",
+			consequent: consequent.combined,
+			alternate: alternate.combined
+		};
+	}
+	return empty;
+};
+const checkTarget = (attributeValue) => {
+	if (isNodeOfType(attributeValue, "Literal") && typeof attributeValue.value === "string") return {
+		combined: attributeValue.value.toLowerCase() === "_blank",
+		testName: "",
+		consequent: false,
+		alternate: false
+	};
+	if (isNodeOfType(attributeValue, "JSXExpressionContainer")) {
+		const expression = attributeValue.expression;
+		if (expression.type === "JSXEmptyExpression") return {
+			combined: false,
+			testName: "",
+			consequent: false,
+			alternate: false
+		};
+		return matchTargetExpression(expression);
+	}
+	return {
+		combined: false,
+		testName: "",
+		consequent: false,
+		alternate: false
+	};
+};
+const jsxNoTargetBlank = defineRule({
+	id: "jsx-no-target-blank",
+	title: "Unsafe target=_blank link",
+	severity: "warn",
+	recommendation: "Add `rel=\"noreferrer\"` (or `\"noopener\"`) when using `target=\"_blank\"`.",
+	category: "Security",
+	create: (context) => {
+		const settings = resolveSettings$28(context.settings);
+		const isLink = (tagName) => {
+			if (!settings.links) return false;
+			if (tagName === "a") return true;
+			return settings.linkComponents.has(tagName);
+		};
+		const isForm = (tagName) => {
+			if (!settings.forms) return false;
+			if (tagName === "form") return true;
+			return settings.formComponents.has(tagName);
+		};
+		return { JSXOpeningElement(node) {
+			if (!isNodeOfType(node.name, "JSXIdentifier")) return;
+			const tagName = resolveJsxElementType(node);
+			if (!tagName) return;
+			if (!isLink(tagName) && !isForm(tagName)) return;
+			const linkAttributeNames = settings.linkComponents.get(tagName) ?? ["href"];
+			const formAttributeNames = settings.formComponents.get(tagName) ?? ["action"];
+			let targetTuple = {
+				combined: false,
+				testName: "",
+				consequent: false,
+				alternate: false
+			};
+			let relTuple = {
+				combined: false,
+				testName: "",
+				consequent: false,
+				alternate: false
+			};
+			let isHrefValid = true;
+			let hasHrefValue = false;
+			let warnSpread = false;
+			let targetReportNode = node.name;
+			let spreadReportNode = null;
+			for (const attribute of node.attributes) {
+				if (isNodeOfType(attribute, "JSXSpreadAttribute")) {
+					if (settings.warnOnSpreadAttributes) {
+						warnSpread = true;
+						spreadReportNode = attribute;
+						targetTuple = {
+							combined: false,
+							testName: "",
+							consequent: false,
+							alternate: false
+						};
+						relTuple = {
+							combined: false,
+							testName: "",
+							consequent: false,
+							alternate: false
+						};
+						isHrefValid = false;
+						hasHrefValue = true;
+					}
+					continue;
+				}
+				if (!isNodeOfType(attribute, "JSXAttribute")) continue;
+				const attributeName = attribute.name;
+				if (!isNodeOfType(attributeName, "JSXIdentifier")) continue;
+				const propName = attributeName.name;
+				const value = attribute.value;
+				if (propName === "target") {
+					if (value) {
+						targetTuple = checkTarget(value);
+						targetReportNode = value;
+					}
+				} else if (propName === "href" || propName === "action" || linkAttributeNames.includes(propName) || formAttributeNames.includes(propName)) {
+					if (value) {
+						hasHrefValue = true;
+						isHrefValid = checkHref(value, settings.enforceDynamicLinks);
+					}
+				} else if (propName === "rel" && value) relTuple = checkRel(value, settings.allowReferrer);
+			}
+			if (warnSpread) {
+				if (hasHrefValue && isHrefValid || relTuple.combined) return;
+				context.report({
+					node: spreadReportNode ?? node,
+					message: SPREAD_MESSAGE
+				});
+				return;
+			}
+			if (!isHrefValid) {
+				if (targetTuple.testName !== "" && targetTuple.testName === relTuple.testName) {
+					const consequentBad = targetTuple.consequent && !relTuple.consequent;
+					const alternateBad = targetTuple.alternate && !relTuple.alternate;
+					if (consequentBad || alternateBad) context.report({
+						node: targetReportNode,
+						message: settings.allowReferrer ? NOOPENER_MESSAGE : NOREFERRER_MESSAGE
+					});
+					return;
+				}
+				if (targetTuple.combined && !relTuple.combined) context.report({
+					node: targetReportNode,
+					message: settings.allowReferrer ? NOOPENER_MESSAGE : NOREFERRER_MESSAGE
+				});
+			}
+		} };
+	}
+});
+//#endregion
 //#region src/plugin/rules/react-builtins/jsx-no-undef.ts
 const buildMessage$18 = (name) => `\`${name}\` crashes at runtime because it isn't defined here.`;
 const KNOWN_GLOBALS = new Set([
@@ -28501,30 +28720,6 @@ const hasAncestorLayoutMatching = (pageFilename, matchesLayout) => {
 const hasAncestorMetadataLayout = (pageFilename) => hasAncestorLayoutMatching(pageFilename, (layoutPath) => METADATA_EXPORT_NAMES.some((exportName) => doesModuleExportName(layoutPath, exportName)));
 //#endregion
 //#region src/plugin/rules/nextjs/nextjs-missing-metadata.ts
-const unwrapAwaitedExpression = (node) => {
-	let expression = stripParenExpression(node);
-	while (isNodeOfType(expression, "AwaitExpression")) expression = stripParenExpression(expression.argument);
-	return expression;
-};
-const isNextNavigationRedirectCall = (node, context) => {
-	const expression = unwrapAwaitedExpression(node);
-	if (!isNodeOfType(expression, "CallExpression")) return false;
-	const callee = stripParenExpression(expression.callee);
-	if (!isNodeOfType(callee, "Identifier")) return false;
-	if (context.scopes.symbolFor(callee)?.kind !== "import") return false;
-	const importedName = getImportedNameFromModule(expression, callee.name, "next/navigation");
-	return importedName === "redirect" || importedName === "permanentRedirect";
-};
-const isRedirectOnlyDefaultExport = (programNode, context) => {
-	const defaultExport = findExportedValue(programNode, "default");
-	if (!defaultExport || !isFunctionLike$1(defaultExport)) return false;
-	if (!isNodeOfType(defaultExport.body, "BlockStatement")) return isNextNavigationRedirectCall(defaultExport.body, context);
-	if (defaultExport.body.body.length !== 1) return false;
-	const onlyStatement = defaultExport.body.body[0];
-	if (isNodeOfType(onlyStatement, "ExpressionStatement")) return isNextNavigationRedirectCall(onlyStatement.expression, context);
-	if (isNodeOfType(onlyStatement, "ReturnStatement") && onlyStatement.argument) return isNextNavigationRedirectCall(onlyStatement.argument, context);
-	return false;
-};
 const nextjsMissingMetadata = defineRule({
 	id: "nextjs-missing-metadata",
 	title: "Page missing metadata for search previews",
@@ -28544,7 +28739,6 @@ const nextjsMissingMetadata = defineRule({
 			if (isNodeOfType(declaration, "FunctionDeclaration")) return declaration.id?.name === "generateMetadata";
 			return (statement.specifiers ?? []).some((specifier) => isNodeOfType(specifier, "ExportSpecifier") && isNodeOfType(specifier.exported, "Identifier") && METADATA_EXPORT_NAMES.includes(specifier.exported.name));
 		})) return;
-		if (isRedirectOnlyDefaultExport(programNode, context)) return;
 		if (hasAncestorMetadataLayout(context.filename ?? "")) return;
 		context.report({
 			node: programNode,
@@ -36803,6 +36997,19 @@ const noDefaultProps = defineRule({
 	} })
 });
 //#endregion
+//#region src/plugin/utils/is-component-function.ts
+const isFunctionAssignedToComponent = (functionNode) => {
+	let cursor = functionNode.parent ?? null;
+	while (isNodeOfType(cursor, "CallExpression")) cursor = cursor.parent ?? null;
+	if (isNodeOfType(cursor, "VariableDeclarator") && isNodeOfType(cursor.id, "Identifier") && isUppercaseName(cursor.id.name)) return true;
+	return isNodeOfType(cursor, "ExportDefaultDeclaration");
+};
+const isComponentFunction$1 = (node) => {
+	if (!isFunctionLike$1(node)) return false;
+	if (isNodeOfType(node, "FunctionDeclaration")) return !node.id || node.id.name === "default" || isUppercaseName(node.id.name) || isNodeOfType(node.parent, "ExportDefaultDeclaration");
+	return isFunctionAssignedToComponent(node);
+};
+//#endregion
 //#region src/plugin/utils/create-component-prop-stack-tracker.ts
 const extractDestructuredPropNames = (params) => {
 	const propNames = /* @__PURE__ */ new Set();
@@ -47186,103 +47393,6 @@ const EXTERNAL_SUBSCRIPTION_HOOK_NAMES$1 = new Set([
 	"useVisibility",
 	"useWindowSize"
 ]);
-const EXTERNAL_SUBSCRIPTION_PRIMITIVE_RESULT_HOOK_NAMES = new Set([
-	"useMatchMedia",
-	"useMediaQuery",
-	"useVisibility"
-]);
-const isImportBindingRef = (ref) => Boolean(ref.resolved?.defs.some((def) => def.type === "ImportBinding"));
-const getImportedExternalSubscriptionHookName = (analysis, rawCallee) => {
-	const callee = stripParenExpression(rawCallee);
-	if (isNodeOfType(callee, "Identifier")) {
-		const calleeRef = getRef(analysis, callee);
-		if (!calleeRef || !isImportBindingRef(calleeRef)) return null;
-		const importBinding = getImportBindingForName(callee, callee.name);
-		if (!importBinding || importBinding.isNamespace) return null;
-		if (importBinding.exportedName && EXTERNAL_SUBSCRIPTION_HOOK_NAMES$1.has(importBinding.exportedName)) return importBinding.exportedName;
-		return importBinding.exportedName === "default" && EXTERNAL_SUBSCRIPTION_HOOK_NAMES$1.has(callee.name) ? callee.name : null;
-	}
-	if (!isNodeOfType(callee, "MemberExpression")) return null;
-	const hookName = getStaticMemberPropertyName(callee);
-	const namespaceIdentifier = stripParenExpression(callee.object);
-	if (!hookName || !EXTERNAL_SUBSCRIPTION_HOOK_NAMES$1.has(hookName) || !isNodeOfType(namespaceIdentifier, "Identifier")) return null;
-	const namespaceRef = getRef(analysis, namespaceIdentifier);
-	if (!namespaceRef || !isImportBindingRef(namespaceRef)) return null;
-	return getImportBindingForName(namespaceIdentifier, namespaceIdentifier.name)?.isNamespace ? hookName : null;
-};
-const isSafeExternalSubscriptionResultBinding = (bindingIdentifier, bindingPattern) => {
-	let current = bindingIdentifier;
-	let didCrossDestructuringBoundary = false;
-	while (current !== bindingPattern) {
-		const parent = current.parent;
-		if (!parent || isNodeOfType(parent, "AssignmentPattern") || isNodeOfType(parent, "RestElement")) return false;
-		if (isNodeOfType(parent, "Property")) {
-			if (parent.value !== current) return false;
-			didCrossDestructuringBoundary = true;
-		}
-		if (isNodeOfType(parent, "ArrayPattern")) didCrossDestructuringBoundary = true;
-		current = parent;
-	}
-	return didCrossDestructuringBoundary;
-};
-const getVariablesDefinedByDeclarator = (analysis, declarator) => analysis.scopeManager.scopes.flatMap((scope) => scope.variables).filter((variable) => variable.defs.some((definition) => definition.node === declarator));
-const hasUnsafeExternalSubscriptionBindingUse = (analysis, variable, visitedVariables = /* @__PURE__ */ new Set()) => {
-	if (visitedVariables.has(variable)) return false;
-	visitedVariables.add(variable);
-	return variable.references.some((candidateReference) => {
-		if (candidateReference.init) return false;
-		if (candidateReference.isWrite()) return true;
-		let usageRoot = findTransparentExpressionRoot(candidateReference.identifier);
-		while (isNodeOfType(usageRoot.parent, "MemberExpression") && usageRoot.parent.object === usageRoot) usageRoot = findTransparentExpressionRoot(usageRoot.parent);
-		const usageParent = usageRoot.parent;
-		if (isNodeOfType(usageParent, "AssignmentExpression") && usageParent.left === usageRoot || isNodeOfType(usageParent, "UpdateExpression") && usageParent.argument === usageRoot || isNodeOfType(usageParent, "UnaryExpression") && usageParent.operator === "delete" && usageParent.argument === usageRoot) return true;
-		let usageAncestor = usageRoot.parent;
-		while (usageAncestor && !isNodeOfType(usageAncestor, "VariableDeclarator") && !isFunctionLike$1(usageAncestor) && !isNodeOfType(usageAncestor, "Program")) usageAncestor = usageAncestor.parent;
-		if (isNodeOfType(usageAncestor, "VariableDeclarator") && usageAncestor.init) {
-			const aliasVariables = getVariablesDefinedByDeclarator(analysis, usageAncestor);
-			return aliasVariables.length === 0 || aliasVariables.some((aliasVariable) => hasUnsafeExternalSubscriptionBindingUse(analysis, aliasVariable, visitedVariables));
-		}
-		return false;
-	});
-};
-const hasOnlySafeExternalSubscriptionResultBindings = (analysis, declarator, variables = getVariablesDefinedByDeclarator(analysis, declarator)) => {
-	return variables.length > 0 && variables.every((variable) => {
-		const bindingIdentifier = variable.defs.find((candidateDefinition) => candidateDefinition.node === declarator)?.name;
-		return Boolean(bindingIdentifier && isNodeOfType(bindingIdentifier, "Identifier") && isSafeExternalSubscriptionResultBinding(bindingIdentifier, declarator.id) && !hasUnsafeExternalSubscriptionBindingUse(analysis, variable));
-	});
-};
-const hasImmutableExternalSubscriptionCallResult = (analysis, rawCallee, relatedRefs, allowWholeResult) => {
-	const callee = stripParenExpression(rawCallee);
-	const callExpression = callee.parent;
-	if (!callExpression || !isNodeOfType(callExpression, "CallExpression") || callExpression.callee !== callee) return false;
-	const initializer = findTransparentExpressionRoot(callExpression);
-	const declarator = initializer.parent;
-	if (!declarator || !isNodeOfType(declarator, "VariableDeclarator") || declarator.init !== initializer || !isNodeOfType(declarator.parent, "VariableDeclaration") || declarator.parent.kind !== "const") return false;
-	const relatedVariables = getVariablesDefinedByDeclarator(analysis, declarator).filter((variable) => relatedRefs.some((relatedRef) => relatedRef.resolved === variable));
-	if (relatedVariables.length === 0) return false;
-	return isNodeOfType(declarator.id, "Identifier") ? allowWholeResult && relatedVariables.every((variable) => !hasUnsafeExternalSubscriptionBindingUse(analysis, variable)) : hasOnlySafeExternalSubscriptionResultBindings(analysis, declarator, relatedVariables);
-};
-const isImmutableImportedExternalSubscriptionHookCallee = (analysis, rawCallee, relatedRefs) => {
-	const hookName = getImportedExternalSubscriptionHookName(analysis, rawCallee);
-	return Boolean(hookName && hasImmutableExternalSubscriptionCallResult(analysis, rawCallee, relatedRefs, EXTERNAL_SUBSCRIPTION_PRIMITIVE_RESULT_HOOK_NAMES.has(hookName)));
-};
-const isExternalSubscriptionHookResultRef = (analysis, ref) => Boolean(ref.resolved?.defs.some((def) => {
-	const declarator = def.node;
-	if (!isNodeOfType(declarator, "VariableDeclarator") || !declarator.init || !isNodeOfType(declarator.parent, "VariableDeclaration") || declarator.parent.kind !== "const") return false;
-	const initializer = stripParenExpression(declarator.init);
-	if (!isNodeOfType(initializer, "CallExpression")) return false;
-	const hookName = getImportedExternalSubscriptionHookName(analysis, initializer.callee);
-	if (!hookName) return false;
-	if (isNodeOfType(declarator.id, "Identifier")) return EXTERNAL_SUBSCRIPTION_PRIMITIVE_RESULT_HOOK_NAMES.has(hookName) && ref.resolved && !hasUnsafeExternalSubscriptionBindingUse(analysis, ref.resolved);
-	const bindingIdentifier = def.name;
-	return isNodeOfType(bindingIdentifier, "Identifier") && isSafeExternalSubscriptionResultBinding(bindingIdentifier, declarator.id) && ref.resolved && !hasUnsafeExternalSubscriptionBindingUse(analysis, ref.resolved);
-}));
-const isExternalSubscriptionHookResultArgument = (analysis, argument) => {
-	const unwrappedArgument = stripParenExpression(argument);
-	if (!isNodeOfType(unwrappedArgument, "Identifier")) return false;
-	const argumentRef = getRef(analysis, unwrappedArgument);
-	return Boolean(argumentRef && isExternalSubscriptionHookResultRef(analysis, argumentRef));
-};
 const isCallbackPropReference = (analysis, ref) => {
 	if (!isProp(analysis, ref)) return false;
 	const identifier = ref.identifier;
@@ -47315,9 +47425,8 @@ const isParentWiredHookCalleeRef = (analysis, ref) => {
 	if (!parent || !isNodeOfType(parent, "CallExpression") || parent.callee !== identifier) return false;
 	return (parent.arguments ?? []).some((hookArgument) => getDownstreamRefs(analysis, hookArgument).some((downstreamRef) => isCallbackPropReference(analysis, downstreamRef)));
 };
-const getLocalHookExternalStateProof = (analysis, ref, scopes) => {
+const getLocalHookExternalStateProof = (analysis, ref) => {
 	let hookFunction = resolveToFunction(ref);
-	let didResolveThroughResultBinding = false;
 	if (!hookFunction) for (const definition of ref.resolved?.defs ?? []) {
 		const definitionNode = definition.node;
 		if (!isNodeOfType(definitionNode, "VariableDeclarator") || !definitionNode.init) continue;
@@ -47328,27 +47437,29 @@ const getLocalHookExternalStateProof = (analysis, ref, scopes) => {
 		const calleeReference = getRef(analysis, callee);
 		if (!calleeReference) continue;
 		hookFunction = resolveToFunction(calleeReference);
-		if (hookFunction) {
-			didResolveThroughResultBinding = true;
-			break;
-		}
+		if (hookFunction) break;
 	}
 	if (!hookFunction) return null;
-	if (didResolveThroughResultBinding && (!ref.resolved || hasUnsafeExternalSubscriptionBindingUse(analysis, ref.resolved))) return false;
-	if (isNodeOfType(hookFunction, "ArrowFunctionExpression") && !isNodeOfType(hookFunction.body, "BlockStatement") && isReactHookCall(stripParenExpression(hookFunction.body), "useSyncExternalStore", scopes)) return true;
-	const returnStatements = collectFunctionReturnStatements(hookFunction);
-	if (returnStatements.length > 0 && returnStatements.every((returnStatement) => returnStatement.argument && isReactHookCall(stripParenExpression(returnStatement.argument), "useSyncExternalStore", scopes))) return true;
-	const returnedReferences = returnStatements.flatMap((returnStatement) => returnStatement.argument ? getDownstreamRefs(analysis, returnStatement.argument) : []);
+	const returnedReferences = collectFunctionReturnStatements(hookFunction).flatMap((returnStatement) => returnStatement.argument ? getDownstreamRefs(analysis, returnStatement.argument) : []);
 	if (returnedReferences.length === 0) return null;
 	return returnedReferences.every((returnedReference) => isState(analysis, returnedReference) && isExternallyDrivenState(analysis, returnedReference));
 };
-const isImmutableLocalExternalStoreHookCallee = (analysis, rawCallee, relatedRefs, scopes) => {
-	const callee = stripParenExpression(rawCallee);
-	if (!isNodeOfType(callee, "Identifier")) return false;
-	const calleeReference = getRef(analysis, callee);
-	if (!calleeReference || getLocalHookExternalStateProof(analysis, calleeReference, scopes) !== true) return false;
-	return hasImmutableExternalSubscriptionCallResult(analysis, callee, relatedRefs, true);
+const isExternalSubscriptionHookRef = (analysis, ref) => {
+	const identifier = ref.identifier;
+	if (!isNodeOfType(identifier, "Identifier")) return false;
+	const localHookProof = getLocalHookExternalStateProof(analysis, ref);
+	if (localHookProof !== null) return localHookProof;
+	if (EXTERNAL_SUBSCRIPTION_HOOK_NAMES$1.has(identifier.name) && isCalleePosition(identifier)) return true;
+	return Boolean(ref.resolved?.defs.some((def) => {
+		const node = def.node;
+		if (!isNodeOfType(node, "VariableDeclarator") || !node.init) return false;
+		const initializer = stripParenExpression(node.init);
+		if (!isNodeOfType(initializer, "CallExpression")) return false;
+		const callee = stripParenExpression(initializer.callee);
+		return isNodeOfType(callee, "Identifier") && EXTERNAL_SUBSCRIPTION_HOOK_NAMES$1.has(callee.name);
+	}));
 };
+const isImportBindingRef = (ref) => Boolean(ref.resolved?.defs.some((def) => def.type === "ImportBinding"));
 const isCalleePosition = (identifier) => {
 	const parent = identifier.parent;
 	return Boolean(parent && (isNodeOfType(parent, "CallExpression") || isNodeOfType(parent, "NewExpression")) && parent.callee === identifier);
@@ -47409,35 +47520,25 @@ const noPassDataToParent = defineRule({
 						return getFunctionalUpdaterDataRefs(analysis, argument);
 					}
 					if (isHandlerBagArgument(analysis, argument)) return [];
-					if (isExternalSubscriptionHookResultArgument(analysis, argument)) return [];
 					if (isParentWiredHookResultArgument(analysis, argument)) return [];
 					if (isNodeOfType(argument, "Identifier")) {
 						const argumentRef = getRef(analysis, argument);
 						if (argumentRef && resolveToFunction(argumentRef)) return [];
 					}
 					return getDownstreamRefs(analysis, argument);
-				}).flatMap((argumentRef) => {
-					if (isExternallyDrivenState(analysis, argumentRef) || getLocalHookExternalStateProof(analysis, argumentRef, context.scopes) === true) return [];
-					const upstreamRefs = getUpstreamRefs(analysis, argumentRef);
-					return upstreamRefs.filter((upstreamRef) => {
-						if (!isLeafRef(upstreamRef)) return false;
-						return !isImmutableImportedExternalSubscriptionHookCallee(analysis, upstreamRef.identifier, upstreamRefs) && !isImmutableLocalExternalStoreHookCallee(analysis, upstreamRef.identifier, upstreamRefs, context.scopes);
-					});
-				});
-				if (calleeNode === identifier && isWrapperHookCallbackRef(analysis, ref, context.scopes)) {
-					const wrapperUpstreamRefs = getArgsUpstreamRefs(analysis, ref);
-					argsUpstreamRefs.push(...wrapperUpstreamRefs.filter((upstreamRef) => isLeafRef(upstreamRef) && !isImmutableImportedExternalSubscriptionHookCallee(analysis, upstreamRef.identifier, wrapperUpstreamRefs) && !isImmutableLocalExternalStoreHookCallee(analysis, upstreamRef.identifier, wrapperUpstreamRefs, context.scopes)));
-				}
+				}).flatMap((argumentRef) => isExternallyDrivenState(analysis, argumentRef) || isExternalSubscriptionHookRef(analysis, argumentRef) ? [] : getUpstreamRefs(analysis, argumentRef)).filter(isLeafRef);
+				if (calleeNode === identifier && isWrapperHookCallbackRef(analysis, ref, context.scopes)) argsUpstreamRefs.push(...getArgsUpstreamRefs(analysis, ref).filter(isLeafRef));
 				if (!argsUpstreamRefs.some((argRef) => {
-					const argIdentifier = argRef.identifier;
-					if (isUseStateIdentifier(argIdentifier)) return false;
+					if (isUseStateIdentifier(argRef.identifier)) return false;
+					if (isExternalSubscriptionHookRef(analysis, argRef)) return false;
 					if (isProp(analysis, argRef)) return false;
-					if (isUseRefIdentifier(argIdentifier)) return false;
+					if (isUseRefIdentifier(argRef.identifier)) return false;
 					if (isRefCurrent(argRef)) return false;
 					if (isConstant(argRef)) return false;
 					if (isParentWiredHookResultRef(analysis, argRef)) return false;
 					if (isParentWiredHookCalleeRef(analysis, argRef)) return false;
 					if (resolveToFunction(argRef)) return false;
+					const argIdentifier = argRef.identifier;
 					if (isImportBindingRef(argRef) && !isCalleePosition(argIdentifier)) return false;
 					if (isNodeOfType(argIdentifier, "Identifier") && argIdentifier.name === "undefined") return false;
 					return true;
@@ -59754,7 +59855,7 @@ const renderingUsetransitionLoading = defineRule({
 const isRepositorySecretFilePath = (relativePath) => DOTENV_FILE_PATTERN.test(relativePath) || /(?:^|\/)\.npmrc$/.test(relativePath) || /(?:^|\/)[^/]*(?:credential|credentials|service-account|serviceAccount|firebase-admin|google-service-account|gcp-service-account)[^/]*\.(?:json|env|pem|key)$/i.test(relativePath);
 //#endregion
 //#region src/plugin/rules/security-scan/repository-secret-file.ts
-const isRepositorySecretExamplePath = (relativePath) => /(?:^|\/)\.env(?:\.[^./]+)*\.(?:example|sample|template|dist|defaults?)$|(?:^|\/)[^/]*(?:example|sample|template)[^/]*\.(?:env|json|pem|key)$/i.test(relativePath);
+const isRepositorySecretExamplePath = (relativePath) => /(?:^|\/)\.env\.(?:example|sample|template|dist|defaults?)$|(?:^|\/)[^/]*(?:example|sample|template)[^/]*\.(?:env|json|pem|key)$/i.test(relativePath);
 const repositorySecretFile = defineRule({
 	id: "repository-secret-file",
 	title: "Secret file checked into repository",
@@ -73173,6 +73274,18 @@ const reactDoctorRules = [
 			requires: [...new Set(["react", ...jsxNoScriptUrl.requires ?? []])]
 		}
 	},
+	{
+		key: "react-doctor/jsx-no-target-blank",
+		id: "jsx-no-target-blank",
+		source: "react-doctor",
+		originallyExternal: true,
+		rule: {
+			...jsxNoTargetBlank,
+			framework: "global",
+			category: "Security",
+			requires: [...new Set(["react", ...jsxNoTargetBlank.requires ?? []])]
+		}
+	},
 	{
 		key: "react-doctor/jsx-no-undef",
 		id: "jsx-no-undef",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "oxlint-plugin-react-doctor",
-  "version": "0.8.1-dev.b4556e3",
+  "version": "0.8.1-dev.b852961",
   "description": "React Doctor rules for oxlint.",
   "keywords": [
     "accessibility",