name: CI

on:
  pull_request:
    branches: [master]

permissions:
  contents: read

jobs:
  lint:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v5

      - name: Read node version from package.json
        id: node_version
        uses: notiz-dev/github-action-json-property@v0.2.0
        with:
          path: "package.json"
          prop_path: "engines.node"

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: ${{ steps.node_version.outputs.prop }}

      - name: Install npm
        run: npm install -g npm@11

      - name: Install dependencies
        run: npm install

      - name: Lint
        run: npm run lint

      - name: Audit
        run: npm audit --audit-level=moderate