Merge branch 'main' into copilot/fix-4342

Author: mfranzke

.config/.lintstagedrc.js

@@ -12,5 +12,8 @@ export default {
 	// ensure that security vulnerabilities are fixed before committing - we need to skip `dev` for the moment as there are some unsolveable conflicts
 	'package-lock.json': 'npm audit fix --omit=dev',
 	// ensure that lock file is up to date
-	'**/package.json': () => 'npm install --package-lock-only --ignore-scripts',
+	'**/package.json': [
+		() => 'npm install --package-lock-only --ignore-scripts',
+		'npx npm-package-json-lint'
+	],
 };

.github/workflows/01-build-outputs.yml

@@ -53,6 +53,11 @@ jobs:
       - name: 🔨 Build outputs
         run: npm run build-outputs
 
+      - name: 📦 Validate Package Publishing
+        run: |
+          npm run lint-packages
+          npm run lint-docs-file-references
+
       - name: ⏫ Upload outputs
         uses: actions/upload-artifact@v4
         with:

.npmpackagejsonlintrc.json

@@ -0,0 +1,35 @@
+{
+  "rules": {
+    "require-name": "error",
+    "require-version": "error",
+    "require-description": "error",
+    "require-license": "error",
+    "require-repository": "error",
+    "valid-values-license": ["error", ["Apache-2.0"]],
+    "require-files": "warning",
+    "no-duplicate-properties": "error",
+    "prefer-absolute-version-devDependencies": "off",
+    "prefer-property-order": ["warning", [
+      "name",
+      "version", 
+      "type",
+      "description",
+      "repository",
+      "homepage",
+      "bugs",
+      "author",
+      "license",
+      "private",
+      "main",
+      "types",
+      "module",
+      "exports",
+      "files",
+      "scripts",
+      "dependencies",
+      "devDependencies",
+      "peerDependencies",
+      "publishConfig"
+    ]]
+  }
+}