Policy rules
Version groups, semver groups, dependency families and the workspace protocol. Configured with [policy], [[version-groups]], [[semver-groups]], [workspace-protocol] and [[dependency-families]].
| Rule | Default severity | Fixable |
|---|---|---|
banned-dependency |
error | unsafe |
invalid-local-version |
error | none |
policy-conflict |
warning | sometimes |
semver-range-mismatch |
error | unsafe |
unsynced-dependency-family |
error | none |
version-mismatch |
error | sometimes |
workspace-protocol |
error | none |
Fixable is safe (applied by --fix), unsafe (applied only by --fix-unsafe), sometimes (fixable for some findings) or none. See the CLI reference.
banned-dependency
Section titled “banned-dependency”A dependency is declared although a banned version group forbids it.
- Default severity: error
- Fixable: unsafe
[rules]banned-dependency = "error"invalid-local-version
Section titled “invalid-local-version”A workspace package has a version that is not an exact semver version, so dependents cannot align with it.
- Default severity: error
- Fixable: none
[rules]invalid-local-version = "error"policy-conflict
Section titled “policy-conflict”Two policies require incompatible outcomes for one dependency, or a group cannot be applied as configured.
- Default severity: warning
- Fixable: sometimes
[rules]policy-conflict = "warn"semver-range-mismatch
Section titled “semver-range-mismatch”A dependency uses a semver range other than the one its semver group requires.
- Default severity: error
- Fixable: unsafe
[rules]semver-range-mismatch = "error"unsynced-dependency-family
Section titled “unsynced-dependency-family”Members of a dependency family declared in one package are on different versions.
- Default severity: error
- Fixable: none
- sherif name:
unsync-similar-dependencies
[rules]unsynced-dependency-family = "error"version-mismatch
Section titled “version-mismatch”A dependency instance differs from the version its version group requires (highest, lowest, pinned, local or snapped).
- Default severity: error
- Fixable: sometimes
- sherif name:
multiple-dependency-versions
[rules]version-mismatch = "error"workspace-protocol
Section titled “workspace-protocol”A dependency on a workspace package does not use the workspace: protocol.
- Default severity: error
- Fixable: none
[rules]workspace-protocol = "error"