Removed linters

Linters and descriptors listed on this page have been removed from MegaLinter in a major version.

Their configuration variables remain valid in the configuration JSON schema (flagged as deprecated), so an existing .mega-linter.yml keeps validating after an upgrade. They are simply ignored at runtime, and MegaLinter displays a notice listing the removed items it found in your configuration.

Removed linters

Linter	Removed in	Replacement	Reason
JSON_ESLINT_PLUGIN_JSONC	v10.0.0	JSON_PRETTIER	Long-standing upstream bug in eslint-plugin-jsonc (ota-meshi/eslint-plugin-jsonc#328)
LUA_SELENE	v10.0.0	LUA_LUACHECK	Disabled since an unresolved upstream bug (Kampfkarren/selene#662)
MAKEFILE_CHECKMAKE	v10.0.0	None	Disabled for security issues (checkmake/checkmake#99), and the MAKEFILE descriptor had no other linter
MARKDOWN_REMARK_LINT	v10.0.0	MARKDOWN_MARKDOWNLINT	Disabled since an unresolved upstream bug (remarkjs/remark-lint#322)
PUPPET_PUPPET_LINT	v10.0.0	None	Disabled since an unresolved upstream bug (puppetlabs/puppet-lint#251), and the PUPPET descriptor had no other linter
REPOSITORY_GITLEAKS	v10.0.0	REPOSITORY_BETTERLEAKS	Superseded by betterleaks, created by the same author, which reads existing .gitleaks.toml and .gitleaksignore files unchanged
REPOSITORY_KICS	v10.0.0	REPOSITORY_CHECKOV	Disabled after the Checkmarx supply chain compromise
SALESFORCE_LIGHTNING_FLOW_SCANNER	v10.0.0	SALESFORCE_CODE_ANALYZER_FLOW	Upstream repository archived
SALESFORCE_SFDX_SCANNER_APEX	v10.0.0	SALESFORCE_CODE_ANALYZER_APEX	sfdx-scanner has been deprecated by Salesforce and is incompatible with Node.js 22+
SALESFORCE_SFDX_SCANNER_AURA	v10.0.0	SALESFORCE_CODE_ANALYZER_AURA	sfdx-scanner has been deprecated by Salesforce and is incompatible with Node.js 22+
SALESFORCE_SFDX_SCANNER_LWC	v10.0.0	SALESFORCE_CODE_ANALYZER_LWC	sfdx-scanner has been deprecated by Salesforce and is incompatible with Node.js 22+
SQL_TSQLLINT	v10.0.0	None	Upstream unmaintained since 2024-09 and shipping unpatched .NET CVEs with no prospect of a fixed release
TERRAFORM_TERRASCAN	v10.0.0	REPOSITORY_CHECKOV	Upstream repository archived by Tenable and shipping unpatched CVEs with no prospect of a fixed release
MARKDOWN_MARKDOWN_LINK_CHECK	v9.0.0	SPELL_LYCHEE	lychee can be used instead and has much better performances
CSS_SCSS_LINT	v8.0.0	CSS_STYLELINT	Project discontinued, with its authors advising to use stylelint instead
OPENAPI_SPECTRAL	v8.0.0	API_SPECTRAL	Replaced by API_SPECTRAL, which runs the same linter on both OpenAPI and AsyncAPI files
SQL_SQL_LINT	v8.0.0	SQL_SQLFLUFF	No longer maintained (joereynolds/sql-lint#262)
KUBERNETES_KUBEVAL	v7.0.0	KUBERNETES_KUBECONFORM	No longer maintained, and its authors recommend kubeconform instead
REPOSITORY_GOODCHECK	v7.0.0	None	Upstream is not open-source anymore
SPELL_MISSPELL	v7.0.0	None	No longer maintained (no commit since 2018)
TERRAFORM_CHECKOV	v7.0.0	REPOSITORY_CHECKOV	Moved to the REPOSITORY descriptor so it can analyze all file types, not only Terraform
TERRAFORM_KICS	v7.0.0	REPOSITORY_CHECKOV	Moved to the REPOSITORY descriptor as REPOSITORY_KICS, which has since been removed too
CREDENTIALS_SECRETLINT	v6.0.0	REPOSITORY_SECRETLINT	The CREDENTIALS descriptor has been merged into the REPOSITORY descriptor
DOCKERFILE_DOCKERFILELINT	v6.0.0	DOCKERFILE_HADOLINT	Upstream is no longer maintained, and hadolint already covers all of its rules
GIT_GIT_DIFF	v6.0.0	REPOSITORY_GIT_DIFF	The GIT descriptor has been merged into the REPOSITORY descriptor
PHP_BUILTIN	v6.0.0	PHP_PHPLINT	The built-in php -l syntax check has been superseded by phplint, which runs the same check in parallel

Removed descriptors

Descriptor	Removed in	Replacement	Reason
MAKEFILE	v10.0.0	None	Its only linter, MAKEFILE_CHECKMAKE, has been removed
PUPPET	v10.0.0	None	Its only linter, PUPPET_PUPPET_LINT, has been removed
OPENAPI	v8.0.0	API	Superseded by the API descriptor
CREDENTIALS	v6.0.0	REPOSITORY	Merged into the REPOSITORY descriptor
GIT	v6.0.0	REPOSITORY	Merged into the REPOSITORY descriptor