pr-checkmate 1.21.0 → 1.21.1

package/.markdownlint.json

@@ -0,0 +1,10 @@
+{
+  "MD013": {
+    "line_length": 500
+  },
+  "MD024": {
+    "siblings_only": true
+  },
+  "MD033": false,
+  "MD060": false
+}

package/README.md

@@ -2,64 +2,67 @@
 ![ESLint](https://img.shields.io/npm/v/eslint?color=yellow&label=ESLint)
 ![Prettier](https://img.shields.io/npm/v/prettier?color=orange&label=Prettier)
 
-
 # ♟️ PR CheckMate
+>
 > **PR CheckMate** is an npm package for automating Pull Request checks.
-> It helps teams maintain code quality by automatically validating linting, formatting, dependencies, and spelling before merging to `main`.
+> It helps teams maintain code quality by automatically validating linting, formatting, dependencies, security, and spelling before merging to `main`.
 
 ## 🔍 Why PR CheckMate?
+
 * ✅ Automatic checks on every PR without extra setup.
 * ✅ No need to install ESLint, Prettier, or cspell in your project — all included.
 * ✅ Enforces a unified code style across repositories.
-* ✅ Checks `package.json` / `package-lock.json` for dependency changes.
-* ✅ Spellcheck for code, documentation, and JSON files with multilingual support (EN, RU, UK, HE, FR).
-* ✅ Package Vulnerabilities Check
-* ✅ Scans for secrets using gitleaks
+* ✅ Detects unused and missing dependencies via `depcheck`.
+* ✅ Finds circular dependencies before they reach production.
+* ✅ Blocks GPL/AGPL/LGPL licensed packages from slipping in.
+* ✅ Validates PR title against Conventional Commits.
+* ✅ Warns about oversized PRs and major-behind packages.
+* ✅ Spellcheck for code, docs, and JSON with multilingual support (EN, RU, UK, HE, FR).
+* ✅ Package vulnerability check via `npm audit`.
+* ✅ Secret scanning via `gitleaks`.
+* ✅ **Delta mode** — in GitHub PR context only changed files are checked, not the entire project.
+* ✅ **Parallel execution** — all independent checks run concurrently, cutting CI time ~4×.
 
 <br>
 > ⚠️ **Note:** Currently, PR CheckMate only supports **Node.js projects**.
 
-
-- [PR CheckMate](https://www.npmjs.com/package/pr-checkmate) – Zero-config CLI that automates ESLint, Prettier, spellcheck, dependency checks, and npm audit for pull requests.
+* [PR CheckMate](https://www.npmjs.com/package/pr-checkmate) – Zero-config CLI that automates ESLint, Prettier, spellcheck, dependency checks, and npm audit for pull requests.
 
 ## 🚀 Zero-Config by Default
+
 You don't need to install or configure:
-- ESLint
-- Prettier
-- cspell (with multilingual dictionaries)
-- Security scanning tools
+
+* ESLint
+* Prettier
+* cspell (with multilingual dictionaries)
+* Security scanning tools
 
 > Everything works out of the box.
 <br>
 
 ### 🧩 Fully Customizable
+
 Users can override:
-- ESLint rules and ignore patterns
-- Prettier rules
-- CSpell dictionary and ignore lists
-- Which checks run
-- Source code path
+
+* ESLint rules and ignore patterns
+* Prettier rules
+* CSpell dictionary and ignore lists
+* Which checks run (skip flags)
+* Source code path
 
 User configuration is stored in:
+
 ```
 <project-root>/pr-checkmate.json
 ```
+
 <br>
 
 ### ⚙️ Example: pr-checkmate.json
+
 ```json
 {
   "sourcePath": "src",
-  "commands": {
-    "npx pr-checkmate init": "Update pr-checkmate.json",
-    "npx pr-checkmate all": "Run all checks",
-    "npx pr-checkmate lint": "Lint code using ESLint",
-    "npx pr-checkmate prettier": "Format code using Prettier",
-    "npx pr-checkmate deps": "Check project dependencies",
-    "npx pr-checkmate npm-audit": "Run package vulnerabilities check",
-    "npx pr-checkmate security": "Security scan",
-    "npx pr-checkmate spellcheck": "Run spellcheck via cspell"
-  },
   "eslint": {
     "rules": {},
     "ignorePatterns": []
@@ -79,11 +82,12 @@ User configuration is stored in:
     "cspell": "https://cspell.org/configuration/"
   }
 }
-
 ```
+
 <br>
 
 ## 🛠 How It Works
+
 ### 1. Install
 
 ```bash
@@ -91,28 +95,47 @@ npm install --save-dev pr-checkmate
 ```
 
 ### 2. Initialize
+
 ```bash
 npx pr-checkmate init
 ```
+
 > This creates:
-> - `pr-checkmate.json` - Configuration file where you can specify the source code path and customize rules
-> - `.github/workflows/pr-checkmate.yml` - GitHub Actions workflow for automated PR checks with auto-commit support
+>
+> * `pr-checkmate.json` — configuration file for source path and custom rules
+> * `.github/workflows/pr-checkmate.yml` — GitHub Actions workflow with per-job checks and auto-commit support
 
 ### 3. Run Checks
+
 ```bash
 npx pr-checkmate <job>
 ```
 
 #### ⚡ Jobs
-| Job        | Description |
-|------------|-------------|
-| `all`      | Run all checks: ESLint, dependency check, Prettier, spellcheck, security scan |
-| `lint`     | Lint code using ESLint |
-| `prettier` | Format code using Prettier |
-| `deps`     | Check project dependencies |
-| `security` | Run security scan for secrets |
-| `spellcheck` | Run spellcheck via cspell (supports EN, RU, UK, HE, FR) |
-| `audit`      | Run `npm audit --audit-level=moderate` to check for vulnerable packages |
+
+| Job            | Description |
+|----------------|-------------|
+| `all`          | Run all checks in parallel (lint, deps, audit, security, circular, license, then spellcheck, pr-size, pr-title, outdated, markdown, then prettier) |
+| `lint`         | Lint code using ESLint |
+| `prettier`     | Format code using Prettier |
+| `deps`         | Check unused / missing dependencies via depcheck |
+| `security`     | Scan for secrets using gitleaks |
+| `spellcheck`   | Spellcheck via cspell (EN, RU, UK, HE, FR) |
+| `audit`        | Run `npm audit --audit-level=moderate` |
+| `circular`     | Detect circular dependencies via dpdm |
+| `license`      | Block GPL / AGPL / LGPL licensed packages |
+| `pr-size`      | Warn if PR exceeds 50 files or 1 000 changed lines |
+| `pr-title`     | Validate PR title against Conventional Commits format |
+| `outdated`     | Report packages that are major versions behind |
+| `markdown`     | Lint `.md`/`.mdx` files via markdownlint (warning-only, delta mode) |
+
+<br>
+
+### ⚡ Delta Mode
+
+In a GitHub Actions PR context, `lint`, `prettier`, `spellcheck`, and `markdown` automatically switch to **delta mode** — only the files changed in the PR are checked instead of the entire project. This is transparent and requires no configuration.
+
+Outside of a PR context (local runs, push workflows) the checks fall back to the full project scan.
 
 <br>
 
@@ -133,28 +156,149 @@ permissions:
   pull-requests: write
 
 jobs:
-  pr-checkmate-all:
-    name: PR Checkmate All Checks
+  lint:
+    name: ESLint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with: { ref: "${{ github.head_ref }}", fetch-depth: 0 }
+      - uses: actions/setup-node@v4
+        with: { node-version: 20 }
+      - run: npm ci
+      - run: npx pr-checkmate lint
+        continue-on-error: true
+
+  deps:
+    name: Dependency Check
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with: { ref: "${{ github.head_ref }}", fetch-depth: 0 }
+      - uses: actions/setup-node@v4
+        with: { node-version: 20 }
+      - run: npm ci
+      - run: npx pr-checkmate deps
+        continue-on-error: true
+
+  circular-deps:
+    name: Circular Dependencies
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with: { ref: "${{ github.head_ref }}", fetch-depth: 0 }
+      - uses: actions/setup-node@v4
+        with: { node-version: 20 }
+      - run: npm ci
+      - run: npx pr-checkmate circular
+        continue-on-error: true
+
+  license-check:
+    name: License Check
     runs-on: ubuntu-latest
     steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-        with:
-          ref: ${{ github.head_ref }}
-          fetch-depth: 0
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: 20
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Run PR Checkmate All Checks
-        run: npx pr-checkmate all
+      - uses: actions/checkout@v4
+        with: { ref: "${{ github.head_ref }}", fetch-depth: 0 }
+      - uses: actions/setup-node@v4
+        with: { node-version: 20 }
+      - run: npm ci
+      - run: npx pr-checkmate license
         continue-on-error: true
 
+  pr-size:
+    name: PR Size
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with: { ref: "${{ github.head_ref }}", fetch-depth: 0 }
+      - uses: actions/setup-node@v4
+        with: { node-version: 20 }
+      - run: npm ci
+      - run: npx pr-checkmate pr-size
+        continue-on-error: true
+
+  pr-title:
+    name: PR Title Lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with: { ref: "${{ github.head_ref }}", fetch-depth: 0 }
+      - uses: actions/setup-node@v4
+        with: { node-version: 20 }
+      - run: npm ci
+      - run: npx pr-checkmate pr-title
+        continue-on-error: true
+
+  outdated-deps:
+    name: Outdated Dependencies
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with: { ref: "${{ github.head_ref }}", fetch-depth: 0 }
+      - uses: actions/setup-node@v4
+        with: { node-version: 20 }
+      - run: npm ci
+      - run: npx pr-checkmate outdated
+        continue-on-error: true
+
+  markdown-lint:
+    name: Markdown Lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with: { ref: "${{ github.head_ref }}", fetch-depth: 0 }
+      - uses: actions/setup-node@v4
+        with: { node-version: 20 }
+      - run: npm ci
+      - run: npx pr-checkmate markdown
+        continue-on-error: true
+
+  spellcheck:
+    name: Spellcheck
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with: { ref: "${{ github.head_ref }}", fetch-depth: 0 }
+      - uses: actions/setup-node@v4
+        with: { node-version: 20 }
+      - run: npm ci
+      - run: npx pr-checkmate spellcheck
+        continue-on-error: true
+
+  security:
+    name: Security Scan
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with: { ref: "${{ github.head_ref }}", fetch-depth: 0 }
+      - uses: actions/setup-node@v4
+        with: { node-version: 20 }
+      - run: npm ci
+      - run: npx pr-checkmate security
+        continue-on-error: true
+
+  npm-audit:
+    name: NPM Audit
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with: { ref: "${{ github.head_ref }}", fetch-depth: 0 }
+      - uses: actions/setup-node@v4
+        with: { node-version: 20 }
+      - run: npm ci
+      - run: npx pr-checkmate audit
+        continue-on-error: true
+
+  prettier:
+    name: Prettier
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with: { ref: "${{ github.head_ref }}", fetch-depth: 0 }
+      - uses: actions/setup-node@v4
+        with: { node-version: 20 }
+      - run: npm ci
+      - run: npx pr-checkmate prettier
+        continue-on-error: true
       - name: Auto-commit formatting changes
         run: |
           git config user.name "github-actions[bot]"
@@ -163,9 +307,6 @@ jobs:
           if ! git diff --cached --quiet; then
             git commit -m "style: auto-format code with Prettier"
             git push origin HEAD:${{ github.head_ref }}
-            echo "Formatting changes committed and pushed"
-          else
-            echo "No formatting changes needed"
           fi
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -186,14 +327,15 @@ For the auto-commit feature to work, ensure your repository has the correct perm
 ## 🌍 Multilingual Spellcheck Support
 
 PR CheckMate includes built-in dictionaries for:
-- 🇬🇧 English (en)
-- 🇪🇸 Spanish (es)
-- 🇫🇷 French (fr)
-- 🇷🇺 Russian (ru)
-- 🇺🇦 Ukrainian (uk)
-- 🇮🇱 Hebrew (he)
 
-No additional configuration needed - just use `npx pr-checkmate spellcheck` and it will check spelling in all supported languages!
+* 🇬🇧 English (en)
+* 🇪🇸 Spanish (es)
+* 🇫🇷 French (fr)
+* 🇷🇺 Russian (ru)
+* 🇺🇦 Ukrainian (uk)
+* 🇮🇱 Hebrew (he)
+
+No additional configuration needed — just use `npx pr-checkmate spellcheck` and it will check spelling in all supported languages.
 
 <br>
 
@@ -205,9 +347,11 @@ No additional configuration needed - just use `npx pr-checkmate spellcheck` and
 * ✅ Automatic formatting and commits when needed
 * ✅ Multilingual spellcheck support out of the box
 * ✅ Minimal setup — just `init` and `npx pr-checkmate all`
-
+* ✅ Delta mode keeps CI fast — only changed files are scanned
+* ✅ License guard prevents copyleft packages from entering your project
 
 ## 🧰 Tech Stack
+
 * **Node.js 20** — executes CLI scripts
 * **TypeScript** — fully typed code
 * **ESLint + @typescript-eslint** — code linting
@@ -215,7 +359,10 @@ No additional configuration needed - just use `npx pr-checkmate spellcheck` and
 * **cspell** — spellchecking with multilingual dictionaries
 * **execa** — running CLI commands from Node.js
 * **gitleaks** — secret scanning
+* **depcheck** — unused and missing dependency analysis
+* **dpdm** — circular dependency detection
+* **license-checker** — license compliance validation
 
+## 📜 License
 
-##  📜 License
-LicenseRef Proprietary © 2025
+LicenseRef Proprietary © 2025

package/dist/config/pr-checkmate-workflow.yml

@@ -242,3 +242,24 @@ jobs:
       - name: Check Outdated Dependencies
         run: npx pr-checkmate outdated
         continue-on-error: true
+
+  markdown-lint:
+    name: Markdown Lint
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run Markdown Lint
+        run: npx pr-checkmate markdown
+        continue-on-error: true

package/dist/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.runOutdatedDeps = exports.runPrTitleLint = exports.runPrSizeCheck = exports.runLicenseCheck = exports.runCircularDeps = exports.runNpmAudit = exports.runSecurityScan = exports.runSpellcheck = exports.runPrettier = exports.runDependencyCheck = exports.runLint = exports.hasLocalConfig = exports.getPackageConfigPath = exports.getSourcePath = void 0;
+exports.runMarkdownLint = exports.runOutdatedDeps = exports.runPrTitleLint = exports.runPrSizeCheck = exports.runLicenseCheck = exports.runCircularDeps = exports.runNpmAudit = exports.runSecurityScan = exports.runSpellcheck = exports.runPrettier = exports.runDependencyCheck = exports.runLint = exports.hasLocalConfig = exports.getPackageConfigPath = exports.getSourcePath = void 0;
 exports.runAllChecks = runAllChecks;
 exports.runChecks = runChecks;
 /**
@@ -19,6 +19,7 @@ const license_check_1 = require("./scripts/license-check");
 const pr_size_check_1 = require("./scripts/pr-size-check");
 const pr_title_lint_1 = require("./scripts/pr-title-lint");
 const outdated_deps_1 = require("./scripts/outdated-deps");
+const markdown_lint_1 = require("./scripts/markdown-lint");
 const utils_1 = require("./utils");
 var config_1 = require("./config");
 Object.defineProperty(exports, "getSourcePath", { enumerable: true, get: function () { return config_1.getSourcePath; } });
@@ -46,6 +47,8 @@ var pr_title_lint_2 = require("./scripts/pr-title-lint");
 Object.defineProperty(exports, "runPrTitleLint", { enumerable: true, get: function () { return pr_title_lint_2.runPrTitleLint; } });
 var outdated_deps_2 = require("./scripts/outdated-deps");
 Object.defineProperty(exports, "runOutdatedDeps", { enumerable: true, get: function () { return outdated_deps_2.runOutdatedDeps; } });
+var markdown_lint_2 = require("./scripts/markdown-lint");
+Object.defineProperty(exports, "runMarkdownLint", { enumerable: true, get: function () { return markdown_lint_2.runMarkdownLint; } });
 /**
  * Run all checks with parallel execution where possible.
  * Blocking: lint, deps, npm-audit, security, circular-deps, license.
@@ -67,6 +70,7 @@ async function runAllChecks() {
         (0, pr_size_check_1.runPrSizeCheck)(),
         (0, pr_title_lint_1.runPrTitleLint)(),
         (0, outdated_deps_1.runOutdatedDeps)(),
+        (0, markdown_lint_1.runMarkdownLint)(),
         (0, spellcheck_1.runSpellcheck)().catch(() => utils_1.logger.warn('⚠️ Spellcheck found issues, continuing...')),
     ]);
     // Phase 3: prettier last — writes files
@@ -94,6 +98,8 @@ async function runChecks(config = {}) {
         await (0, pr_title_lint_1.runPrTitleLint)();
     if (!config.skipOutdated)
         await (0, outdated_deps_1.runOutdatedDeps)();
+    if (!config.skipMarkdown)
+        await (0, markdown_lint_1.runMarkdownLint)();
     if (!config.skipSpell)
         await (0, spellcheck_1.runSpellcheck)();
     if (!config.skipFormat)

package/dist/init.js

@@ -32,6 +32,11 @@ const DEFAULT_CONFIG = {
         ignorePaths: [],
         ignoreRegExpList: [],
     },
+    // Markdownlint customization
+    markdownlint: {
+        rules: {},
+        ignores: [],
+    },
     documentation: config_1.documentation,
 };
 async function init() {

package/dist/scripts/dependency-check.js

@@ -15,31 +15,43 @@ async function runDependencyCheck() {
         utils_1.logger.warn('[runDependencyCheck]: ⚠️ No package.json found, skipping');
         return;
     }
+    // execa v9 always throws on non-zero exit; depcheck exits 255 when it finds issues
+    // but the JSON result is still in error.stdout — extract it either way
+    let stdout;
     try {
-        const { stdout } = await (0, execa_1.execa)('npx', ['depcheck', '--json'], { cwd: projectRoot });
-        const result = JSON.parse(stdout);
-        const unused = result.dependencies ?? [];
-        const missing = Object.keys(result.missing ?? {});
-        if (unused.length === 0 && missing.length === 0) {
-            utils_1.logger.info('[runDependencyCheck]: ✅ Dependencies are clean');
-            return;
-        }
-        if (unused.length > 0) {
-            utils_1.logger.warn(`[runDependencyCheck]: ⚠️ ${unused.length} unused dependency(ies):`);
-            unused.forEach(dep => utils_1.logger.warn(`  ${dep}`));
-        }
-        if (missing.length > 0) {
-            utils_1.logger.error(`[runDependencyCheck]: ❌ ${missing.length} missing dependency(ies):`);
-            missing.forEach(dep => utils_1.logger.error(`  ${dep} (used in: ${result.missing[dep]?.join(', ')})`));
-            throw new Error(`Missing dependencies: ${missing.join(', ')}`);
-        }
-        // Unused deps are warnings — don't block the build
+        ({ stdout } = await (0, execa_1.execa)('npx', ['depcheck', '--json'], { cwd: projectRoot }));
     }
     catch (err) {
-        const error = err;
-        if (error.message?.startsWith('Missing dependencies'))
+        if (err instanceof execa_1.ExecaError && err.stdout) {
+            stdout = err.stdout;
+        }
+        else {
+            utils_1.logger.error(`[runDependencyCheck]: ❌ Dependency check failed\n${err}`);
             throw err;
-        utils_1.logger.error(`[runDependencyCheck]: ❌ Dependency check failed\n${err}`);
-        throw err;
+        }
+    }
+    let result;
+    try {
+        result = JSON.parse(stdout);
+    }
+    catch {
+        utils_1.logger.error('[runDependencyCheck]: ❌ Failed to parse depcheck output');
+        throw new Error('depcheck produced invalid JSON');
+    }
+    const unused = result.dependencies ?? [];
+    const missing = Object.keys(result.missing ?? {});
+    if (unused.length === 0 && missing.length === 0) {
+        utils_1.logger.info('[runDependencyCheck]: ✅ Dependencies are clean');
+        return;
+    }
+    if (unused.length > 0) {
+        utils_1.logger.warn(`[runDependencyCheck]: ⚠️ ${unused.length} unused dependency(ies):`);
+        unused.forEach(dep => utils_1.logger.warn(`  ${dep}`));
+    }
+    if (missing.length > 0) {
+        utils_1.logger.error(`[runDependencyCheck]: ❌ ${missing.length} missing dependency(ies):`);
+        missing.forEach(dep => utils_1.logger.error(`  ${dep} (used in: ${result.missing[dep]?.join(', ')})`));
+        throw new Error(`Missing dependencies: ${missing.join(', ')}`);
     }
+    // Unused deps are warnings — don't block the build
 }

package/dist/scripts/index.js

@@ -25,6 +25,7 @@ const license_check_1 = require("./license-check");
 const pr_size_check_1 = require("./pr-size-check");
 const pr_title_lint_1 = require("./pr-title-lint");
 const outdated_deps_1 = require("./outdated-deps");
+const markdown_lint_1 = require("./markdown-lint");
 const utils_1 = require("../utils");
 const lint_1 = require("./lint");
 __exportStar(require("./dependency-check"), exports);
@@ -37,6 +38,7 @@ __exportStar(require("./license-check"), exports);
 __exportStar(require("./pr-size-check"), exports);
 __exportStar(require("./pr-title-lint"), exports);
 __exportStar(require("./outdated-deps"), exports);
+__exportStar(require("./markdown-lint"), exports);
 async function runJob(jobName) {
     utils_1.logger.info(`[runJob]: 🚀 Running job: ${jobName}`);
     try {
@@ -56,6 +58,7 @@ async function runJob(jobName) {
                     (0, pr_size_check_1.runPrSizeCheck)(),
                     (0, pr_title_lint_1.runPrTitleLint)(),
                     (0, outdated_deps_1.runOutdatedDeps)(),
+                    (0, markdown_lint_1.runMarkdownLint)(),
                     (0, spellcheck_1.runSpellcheck)().catch(() => utils_1.logger.warn('⚠️ Spellcheck found issues, continuing...')),
                 ]);
                 // Phase 3: prettier last — writes files
@@ -100,8 +103,11 @@ async function runJob(jobName) {
             case 'outdated':
                 await (0, outdated_deps_1.runOutdatedDeps)();
                 break;
+            case 'markdown':
+                await (0, markdown_lint_1.runMarkdownLint)();
+                break;
             default:
-                utils_1.logger.warn(`[runJob]: Unknown job "${jobName}". Available: all, lint, deps, npm-audit, prettier, spellcheck, security, circular, license, pr-size, pr-title, outdated`);
+                utils_1.logger.warn(`[runJob]: Unknown job "${jobName}". Available: all, lint, deps, npm-audit, prettier, spellcheck, security, circular, license, pr-size, pr-title, outdated, markdown`);
         }
     }
     catch (err) {

package/dist/scripts/license-check.js

@@ -22,7 +22,8 @@ async function runLicenseCheck() {
         const licenses = JSON.parse(stdout);
         const violations = [];
         for (const [pkg, info] of Object.entries(licenses)) {
-            const license = info.licenses ?? '';
+            const raw = info.licenses ?? '';
+            const license = Array.isArray(raw) ? raw.join(' OR ') : raw;
             if (FORBIDDEN_LICENSES.some(f => license.includes(f))) {
                 violations.push(`  ${pkg}: ${license}`);
             }

package/dist/scripts/markdown-lint.js

@@ -0,0 +1,62 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runMarkdownLint = runMarkdownLint;
+const execa_1 = require("execa");
+const utils_1 = require("../utils");
+const delta_1 = require("../utils/delta");
+const config_1 = require("../config");
+const node_path_1 = __importDefault(require("node:path"));
+const node_fs_1 = __importDefault(require("node:fs"));
+function loadUserMarkdownConfig() {
+    const configPath = node_path_1.default.join(process.cwd(), 'pr-checkmate.json');
+    if (!node_fs_1.default.existsSync(configPath)) {
+        return {};
+    }
+    try {
+        const config = JSON.parse(node_fs_1.default.readFileSync(configPath, 'utf-8'));
+        return config.markdownlint || {};
+    }
+    catch (err) {
+        utils_1.logger.warn(`[loadUserMarkdownConfig]: ⚠️ Failed to read markdownlint config from pr-checkmate.json: ${err}`);
+        return {};
+    }
+}
+async function runMarkdownLint() {
+    utils_1.logger.info('[runMarkdownLint]: 📝 Running Markdown lint...');
+    const root = process.cwd();
+    const changedFiles = await (0, delta_1.getChangedFiles)(['.md', '.mdx']);
+    const targets = changedFiles ?? [`${root}/**/*.md`];
+    const userConfig = loadUserMarkdownConfig();
+    // Prefer local .markdownlint.json → else fall back to bundled one
+    let configArg;
+    if ((0, config_1.hasLocalConfig)(['.markdownlint.json', '.markdownlint.jsonc', '.markdownlint.yaml', '.markdownlint.yml'])) {
+        utils_1.logger.info('[runMarkdownLint]: 📋 Using local .markdownlint config');
+        configArg = [];
+    }
+    else {
+        const bundledConfig = (0, config_1.getPackageConfigPath)('.markdownlint.json');
+        utils_1.logger.info('[runMarkdownLint]: 📋 Using pr-checkmate bundled markdownlint config');
+        configArg = ['--config', bundledConfig];
+    }
+    const extraIgnores = (userConfig.ignores ?? []).flatMap(p => ['--ignore', p]);
+    const args = [
+        'markdownlint',
+        ...targets,
+        ...configArg,
+        '--ignore', 'node_modules',
+        '--ignore', 'dist',
+        '--ignore', 'coverage',
+        ...extraIgnores,
+    ];
+    const result = await (0, execa_1.execa)('npx', args, { reject: false, stdio: 'inherit' });
+    if (result.exitCode === 0) {
+        utils_1.logger.info('[runMarkdownLint]: ✅ Markdown lint passed');
+    }
+    else {
+        utils_1.logger.warn('[runMarkdownLint]: ⚠️ Markdown lint found issues (see above)');
+        // warning only — never block
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "pr-checkmate",
-    "version": "1.21.0",
+    "version": "1.21.1",
     "description": "Automated PR quality checks: linting, formatting, dependency analysis, and spellcheck",
     "keywords": [
         "github-actions",
@@ -26,6 +26,7 @@
         ".eslintignore",
         "cspell.json",
         "src/config/pr-checkmate-workflow.yml",
+        ".markdownlint.json",
         "LICENSE"
     ],
     "scripts": {
@@ -73,6 +74,7 @@
         "eslint-plugin-prettier": "^5.5.4",
         "execa": "^9.6.0",
         "gitleaks-secret-scanner-fixed": "^2.1.3",
+        "markdownlint-cli": "^0.45.0",
         "inquirer": "^13.0.1",
         "prettier": ">=3.0.0",
         "ts-node": "^10.9.1",

package/src/config/pr-checkmate-workflow.yml

@@ -242,3 +242,24 @@ jobs:
       - name: Check Outdated Dependencies
         run: npx pr-checkmate outdated
         continue-on-error: true
+
+  markdown-lint:
+    name: Markdown Lint
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run Markdown Lint
+        run: npx pr-checkmate markdown
+        continue-on-error: true