noUndeclaredDependencies (since v1.6.0)
Diagnostic Category: lint/nursery/noUndeclaredDependencies
Disallow the use of dependencies that aren’t specified in the package.json.
Indirect dependencies will trigger the rule because they aren’t declared in the package.json. This means that if package @org/foo has a dependency on lodash, and then you use
import "lodash" somewhere in your project, the rule will trigger a diagnostic for this import.
The rule ignores imports using a protocol such as node:, bun:, jsr:, https:.
Examples
Section titled ExamplesInvalid
Section titled Invalidimport "vite";Valid
Section titled Validimport { A } from "./local.js";import assert from "node:assert";