// Before
handleError(error: any): void

// After
handleError(error: unknown): void {
  if (error && typeof error === 'object') {
    console.error('Error message:', (error as { message?: string }).message);
    // ... proper type narrowing
  }
}

// Before
error: (err: any) => { ... }

// After
error: (err: unknown) => { ... }

// Before
constructor(
  private http: HttpClient,
  private authService: AuthService
) {}

uploadDocument(applicationId: number, file: File): Observable<any>

// After
private http = inject(HttpClient);
private authService = inject(AuthService);

uploadDocument(applicationId: number, file: File): Observable<{
  documentId: number;
  fileName: string;
  uploadedAt: Date
}>

// Before
private handleError(error: any): Observable<never>

// After
private handleError(error: unknown): Observable<never>

// Before
type: 'FULL_TIME' as any,
experienceLevel: 'MID' as any,

// After
import { JobType, ExperienceLevel } from '../models/job.model';

type: JobType.FULL_TIME,
experienceLevel: ExperienceLevel.MID,

# Before
- name: Run linting
  run: npm run lint || true  # ❌ Always passes

# After
- name: Run linting
  run: npm run lint -- --max-warnings=0  # ✅ Strict checking

"lint-staged": {
  "*.ts": [
    "eslint --fix",
    "prettier --write"
  ],
  "*.html": [
    "prettier --write"
  ],
  "*.scss": [
    "prettier --write"
  ]
}

npm audit fix --force

# All sensitive values use environment variables
security:
  jwt:
    secret: ${JWT_SECRET:default}

firecrawl:
  api:
    key: ${FIRECRAWL_API_KEY:}

spring:
  mail:
    password: ${MAIL_PASSWORD:}

// ❌ Avoid
function handleError(error: any) {
  console.log(error.message); // Unsafe!
}

// ✅ Prefer
function handleError(error: unknown) {
  if (error && typeof error === 'object') {
    const err = error as { message?: string };
    console.log(err.message); // Type-safe!
  }
}

// ✅ Good (Old Style)
constructor(private http: HttpClient) {}

// ✅ Better (Modern Style - Angular 14+)
private http = inject(HttpClient);

// ❌ Avoid
type: 'FULL_TIME' as any,

// ✅ Prefer
type: JobType.FULL_TIME,

Developer commits code
       ↓
lint-staged runs automatically
       ↓
├─ ESLint fixes TypeScript
├─ Prettier formats code
└─ Stages fixed files
       ↓
Commit succeeds (if all checks pass)

Push to GitHub
       ↓
Frontend CI Workflow
       ↓
├─ Install dependencies
├─ Run linting (strict - max-warnings=0) ✅ NEW
├─ Run tests
├─ Build application
└─ Security scan
       ↓
All checks must pass to merge