fix: integrate strict ESLint config and restore build stability

cornucopia.owasp.org/eslint.config.js

@@ -1,30 +1,82 @@
-import js from '@eslint/js';
-import ts from 'typescript-eslint';
-import svelte from 'eslint-plugin-svelte';
-import globals from 'globals';
-import tsParser from '@typescript-eslint/parser';
+import love from 'eslint-config-love'
+import sveltePlugin from 'eslint-plugin-svelte'
+import svelteParser from 'svelte-eslint-parser'
+import tsParser from '@typescript-eslint/parser'
+import tsPlugin from '@typescript-eslint/eslint-plugin'
+import commentsPlugin from '@eslint-community/eslint-plugin-eslint-comments'
+import importPlugin from 'eslint-plugin-import'
+import nPlugin from 'eslint-plugin-n'
+import promisePlugin from 'eslint-plugin-promise'
+import globals from 'globals'
 
-export default ts.config(
-  js.configs.recommended,
-  ...ts.configs.recommended,
-  ...svelte.configs['flat/recommended'],
+export default [
+  // 1. GLOBAL IGNORES
   {
+    ignores: [
+      '**/node_modules/**', '**/.svelte-kit/**', '**/build/**', '**/dist/**',
+      '**/static/**', '**/documentation/**', '**/script/**', '*.config.js',
+      '*.config.cjs', 'vite.config.ts', 'vitest.config.ts'
+    ]
+  },
+
+  // 2. MAIN RULES (Strict for production, just like Sydseter wants!)
+  {
+    files: ['src/**/*.ts', 'src/**/*.js'],
+    plugins: {
+      '@typescript-eslint': tsPlugin,
+      '@eslint-community/eslint-comments': commentsPlugin,
+      'import': importPlugin,
+      'n': nPlugin,
+      'promise': promisePlugin
+    },
     languageOptions: {
-      globals: {
-        ...globals.browser,
-        ...globals.node
-      }
+      parser: tsParser,
+      parserOptions: {
+        project: true,
+        tsconfigRootDir: import.meta.dirname,
+      },
+      globals: { ...globals.browser, ...globals.node }
+    },
+    rules: {
+      ...love.rules,
+      // We are leaving the strict rules ON so we can fix them properly, 
+      // but we will silence a few highly disruptive formatting ones.
+      'no-plusplus': 'off',
+      'require-unicode-regexp': 'off',
+      'no-console': 'off',
+      '@typescript-eslint/restrict-template-expressions': 'off'
     }
   },
+
+  // 3. SVELTE FILES
   {
     files: ['**/*.svelte'],
+    plugins: {
+      svelte: sveltePlugin,
+      '@typescript-eslint': tsPlugin
+    },
     languageOptions: {
+      parser: svelteParser,
       parserOptions: {
-        parser: tsParser
+        parser: tsParser,
+        project: null
       }
+    },
+    rules: {
+      ...sveltePlugin.configs.recommended.rules,
+      '@typescript-eslint/no-unsafe-assignment': 'off',
+      '@typescript-eslint/no-unsafe-member-access': 'off'
     }
   },
+
+  // 4. THE PRO MOVE: TEST FILES EXCEPTION
+  // Magic numbers and unbound methods are expected and totally fine in test suites.
   {
-    ignores: ['build/', '.svelte-kit/', 'dist/', 'deploy/']
+    files: ['**/*.test.ts'],
+    rules: {
+      '@typescript-eslint/no-magic-numbers': 'off',
+      '@typescript-eslint/unbound-method': 'off',
+      '@typescript-eslint/no-empty-function': 'off'
+    }
   }
-);
+]

cornucopia.owasp.org/package.json

@@ -6,30 +6,46 @@
 		"dev": "vite dev",
 		"prebuild": "echo I run before the build script",
 		"productionbuild": "vite build && node ./script/headers.js && npx svelte-sitemap --domain https://cornucopia.owasp.org --ignore 404 --ignore cards/COM* --ignore cards/DVE* --ignore cards/AC* --ignore cards/CO*",
-		"build": "svelte-kit sync && vite build && node ./script/headers.js && npx svelte-sitemap --domain https://cornucopia.owasp.org --ignore 404 --ignore cards/COM* --ignore cards/DVE* --ignore cards/AC* --ignore cards/CO*",
+		"build": "svelte-kit sync && pnpm run lint && vite build && node ./script/headers.js && npx svelte-sitemap --domain https://cornucopia.owasp.org --ignore 404 --ignore cards/COM* --ignore cards/DVE* --ignore cards/AC* --ignore cards/CO*",
 		"build-stage": "svelte-kit sync && vite build && node ./script/headers-stage.js && npx svelte-sitemap --domain https://owaspcornucopia.org --ignore 404 --ignore cards/COM* --ignore cards/DVE* --ignore cards/AC* --ignore cards/CO*",
 		"preview": "vite preview",
 		"check": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json",
 		"check:watch": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json --watch",
+		"lint": "eslint .",
+		"lint:fix": "eslint --fix .",
 		"test": "vitest",
 		"coverage": "vitest run --coverage",
 		"smoke-test": "node ./script/smoke-test.js"
 	},
 	"devDependencies": {
+		"@eslint-community/eslint-plugin-eslint-comments": "^4.7.1",
+		"@eslint/js": "9",
 		"@sveltejs/adapter-auto": "^7.0.0",
 		"@sveltejs/adapter-cloudflare": "^7.2.6",
-		"@sveltejs/kit": "^2.55.0",
+		"@sveltejs/kit": "latest",
 		"@sveltejs/vite-plugin-svelte": "^6.2.4",
+		"@testing-library/svelte": "^5.3.1",
 		"@types/node": "^25.5.0",
+		"@typescript-eslint/eslint-plugin": "^8.57.1",
+		"@typescript-eslint/parser": "^8.57.1",
 		"@vitest/coverage-v8": "^4.0.17",
 		"dotenv": "^17.3.1",
+		"eslint": "9",
+		"eslint-config-love": "^151.0.0",
+		"eslint-plugin-import": "^2.32.0",
+		"eslint-plugin-n": "^17.24.0",
+		"eslint-plugin-promise": "^7.2.1",
+		"eslint-plugin-svelte": "^3.15.2",
+		"globals": "^17.4.0",
 		"serve": "^14.2.6",
 		"svelte": "^5.50.3",
 		"svelte-check": "^4.4.5",
+		"svelte-eslint-parser": "^1.6.0",
 		"svelte-sitemap": "^3.0.1",
 		"then-request": "^6.0.2",
 		"tslib": "^2.8.1",
 		"typescript": "^5.9.3",
+		"typescript-eslint": "^8.57.1",
 		"vite": "^7.3.1",
 		"vitest": "^4.0.17",
 		"wait-on": "^9.0.4",