Removed linters
Linters and descriptors listed on this page have been removed from MegaLinter in a major version.
Their configuration variables remain valid in the configuration JSON schema (flagged as deprecated), so an existing .mega-linter.yml keeps validating after an upgrade. They are simply ignored at runtime, and MegaLinter displays a notice listing the removed items it found in your configuration.
Removed linters
| Linter | Removed in | Replacement | Reason |
|---|---|---|---|
API_SPECTRAL |
v10.0.0 | None | Crashing with no upstream fix, and the API descriptor had no other linter |
JSON_ESLINT_PLUGIN_JSONC |
v10.0.0 | JSON_PRETTIER |
Long-standing upstream bug in eslint-plugin-jsonc (ota-meshi/eslint-plugin-jsonc#328) |
LUA_SELENE |
v10.0.0 | LUA_LUACHECK |
Disabled since an unresolved upstream bug (Kampfkarren/selene#662) |
MAKEFILE_CHECKMAKE |
v10.0.0 | None | Disabled for security issues (checkmake/checkmake#99), and the MAKEFILE descriptor had no other linter |
MARKDOWN_REMARK_LINT |
v10.0.0 | MARKDOWN_MARKDOWNLINT |
Disabled since an unresolved upstream bug (remarkjs/remark-lint#322) |
PUPPET_PUPPET_LINT |
v10.0.0 | None | Disabled since an unresolved upstream bug (puppetlabs/puppet-lint#251), and the PUPPET descriptor had no other linter |
REPOSITORY_GITLEAKS |
v10.0.0 | REPOSITORY_BETTERLEAKS |
Superseded by betterleaks, created by the same author, which reads existing .gitleaks.toml and .gitleaksignore files unchanged |
REPOSITORY_KICS |
v10.0.0 | REPOSITORY_CHECKOV |
Disabled after the Checkmarx supply chain compromise |
SALESFORCE_LIGHTNING_FLOW_SCANNER |
v10.0.0 | SALESFORCE_CODE_ANALYZER_FLOW |
Upstream repository archived |
SALESFORCE_SFDX_SCANNER_APEX |
v10.0.0 | SALESFORCE_CODE_ANALYZER_APEX |
sfdx-scanner has been deprecated by Salesforce and is incompatible with Node.js 22+ |
SALESFORCE_SFDX_SCANNER_AURA |
v10.0.0 | SALESFORCE_CODE_ANALYZER_AURA |
sfdx-scanner has been deprecated by Salesforce and is incompatible with Node.js 22+ |
SALESFORCE_SFDX_SCANNER_LWC |
v10.0.0 | SALESFORCE_CODE_ANALYZER_LWC |
sfdx-scanner has been deprecated by Salesforce and is incompatible with Node.js 22+ |
SQL_TSQLLINT |
v10.0.0 | None | Upstream unmaintained since 2024-09 and shipping unpatched .NET CVEs with no prospect of a fixed release |
TERRAFORM_TERRASCAN |
v10.0.0 | REPOSITORY_CHECKOV |
Upstream repository archived by Tenable and shipping unpatched CVEs with no prospect of a fixed release |
MARKDOWN_MARKDOWN_LINK_CHECK |
v9.0.0 | SPELL_LYCHEE |
lychee can be used instead and has much better performances |
CSS_SCSS_LINT |
v8.0.0 | CSS_STYLELINT |
Project discontinued, with its authors advising to use stylelint instead |
OPENAPI_SPECTRAL |
v8.0.0 | None | Replaced by API_SPECTRAL, which has since been removed too |
SQL_SQL_LINT |
v8.0.0 | SQL_SQLFLUFF |
No longer maintained (joereynolds/sql-lint#262) |
KUBERNETES_KUBEVAL |
v7.0.0 | KUBERNETES_KUBECONFORM |
No longer maintained, and its authors recommend kubeconform instead |
REPOSITORY_GOODCHECK |
v7.0.0 | None | Upstream is not open-source anymore |
SPELL_MISSPELL |
v7.0.0 | None | No longer maintained (no commit since 2018) |
TERRAFORM_CHECKOV |
v7.0.0 | REPOSITORY_CHECKOV |
Moved to the REPOSITORY descriptor so it can analyze all file types, not only Terraform |
TERRAFORM_KICS |
v7.0.0 | REPOSITORY_CHECKOV |
Moved to the REPOSITORY descriptor as REPOSITORY_KICS, which has since been removed too |
CREDENTIALS_SECRETLINT |
v6.0.0 | REPOSITORY_SECRETLINT |
The CREDENTIALS descriptor has been merged into the REPOSITORY descriptor |
DOCKERFILE_DOCKERFILELINT |
v6.0.0 | DOCKERFILE_HADOLINT |
Upstream is no longer maintained, and hadolint already covers all of its rules |
GIT_GIT_DIFF |
v6.0.0 | REPOSITORY_GIT_DIFF |
The GIT descriptor has been merged into the REPOSITORY descriptor |
PHP_BUILTIN |
v6.0.0 | PHP_PHPLINT |
The built-in php -l syntax check has been superseded by phplint, which runs the same check in parallel |
Removed descriptors
| Descriptor | Removed in | Replacement | Reason |
|---|---|---|---|
API |
v10.0.0 | None | Its only linter, API_SPECTRAL, has been removed |
MAKEFILE |
v10.0.0 | None | Its only linter, MAKEFILE_CHECKMAKE, has been removed |
PUPPET |
v10.0.0 | None | Its only linter, PUPPET_PUPPET_LINT, has been removed |
OPENAPI |
v8.0.0 | None | Superseded by the API descriptor, which has since been removed too |
CREDENTIALS |
v6.0.0 | REPOSITORY |
Merged into the REPOSITORY descriptor |
GIT |
v6.0.0 | REPOSITORY |
Merged into the REPOSITORY descriptor |