feat: added further linting

ensure lock file consistency and ensure npm audit fix

Author: mfranzke

.config/.lintstagedrc.json

@@ -1,5 +1,6 @@
 {
 	"*.md": "markdownlint --config .config/.markdown-lint.yml --fix",
 	"test/fixtures/*.css": "npm run build:docs",
-	"*.{js,ts,tsx,jsx,mjs,cjs}": "npm run lint:xo -- --fix"
+	"*.{js,ts,tsx,jsx,mjs,cjs}": "npm run lint:xo -- --fix",
+	"package-lock.json": "npm audit fix"
 }

.husky/pre-push

@@ -0,0 +1,40 @@
+# Configuration: Each entry is an array with [pattern, command, description]
+CHECKS=(
+  # Format: "pattern" "command" "pattern description"
+  '^(package\.json|package-lock\.json)$' 'npm install --package-lock-only --ignore-scripts' 'package.json or package-lock.json'
+)
+
+# Check for changes in specified files before pushing and run corresponding commands
+## Get the upstream branch
+UPSTREAM=$(git rev-parse --abbrev-ref --symbolic-full-name @{u} 2>/dev/null)
+if [ -z "$UPSTREAM" ]; then
+  echo "No upstream configured, skipping pre-push checks."
+  exit 0
+fi
+
+## Get the list of files changed between upstream and HEAD
+FILES=$(git diff --name-only $UPSTREAM..HEAD)
+
+## Check each pattern and run corresponding command
+for ((i=0; i<${#CHECKS[@]}; i+=3)); do
+  pattern="${CHECKS[i]}"
+  command="${CHECKS[i+1]}"
+  description="${CHECKS[i+2]}"
+
+  if echo "$FILES" | grep -qE "$pattern"; then
+    echo "Detected changes in $description"
+
+    ## Run the corresponding command
+    eval "$command"
+
+    if [ $? -ne 0 ]; then
+      echo "Command failed: $command. Aborting push."
+      exit 1
+    fi
+
+    # Exit after first match to avoid running multiple commands
+    exit 0
+  fi
+done
+
+echo "No monitored file changes detected. Skipping checks."