- Add .forgejo/workflows/ci.yml with matrix (ubuntu/windows), build, test, lint jobs - Add .eslintrc.cjs with shell:true guard (no-restricted-syntax) and @typescript-eslint rules - Add lint script to package.json and ESLint v8 devDependencies - Add CI section to README.md Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
21 lines
731 B
JavaScript
21 lines
731 B
JavaScript
'use strict';
|
|
module.exports = {
|
|
root: true,
|
|
parser: '@typescript-eslint/parser',
|
|
plugins: ['@typescript-eslint'],
|
|
extends: ['eslint:recommended', 'plugin:@typescript-eslint/recommended'],
|
|
rules: {
|
|
// Sicherheits-Guard: kein shell:true in child_process
|
|
'no-restricted-syntax': [
|
|
'error',
|
|
{
|
|
selector: 'Property[key.name="shell"][value.value=true]',
|
|
message: 'shell:true ist verboten — Command-Injection-Risiko. Nutze cross-spawn mit shell:false.'
|
|
}
|
|
],
|
|
'@typescript-eslint/no-explicit-any': 'warn',
|
|
'@typescript-eslint/no-unused-vars': ['error', { argsIgnorePattern: '^_' }],
|
|
},
|
|
env: { node: true, es2022: true },
|
|
ignorePatterns: ['dist/', 'node_modules/'],
|
|
};
|