prefer-https-urls

📝 Prefer https:// URLs in metadata fields.

💼 This rule is enabled in the ✅ recommended config.

🔧 This rule is automatically fixable by the --fix CLI option.

Metadata URLs should use https://. An http:// URL is insecure and increasingly unsupported; npm's own documentation uses https:// throughout.

This rule flags http:// URLs in homepage, bugs, repository, and funding (string, url, or array forms) and autofixes them to https://.

Examples

// ❌
{
	"homepage": "http://example.com"
}

// ✅
{
	"homepage": "https://example.com"
}