chore: add eslint-plugin-regexp (#1123)

Author: btea

.oxlintrc.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://unpkg.com/oxlint/configuration_schema.json",
   "plugins": ["unicorn", "typescript", "oxc", "vue", "vitest"],
-  "jsPlugins": ["@e18e/eslint-plugin"],
+  "jsPlugins": ["@e18e/eslint-plugin", "eslint-plugin-regexp"],
   "categories": {
     "correctness": "error",
     "suspicious": "warn",
@@ -17,7 +17,72 @@
     "e18e/prefer-timer-args": "error",
     "e18e/prefer-date-now": "error",
     "e18e/prefer-regex-test": "error",
-    "e18e/prefer-array-some": "error"
+    "e18e/prefer-array-some": "error",
+    // RegExp - Possible Errors (most critical)
+    "regexp/no-contradiction-with-assertion": "error",
+    "regexp/no-dupe-disjunctions": "error",
+    "regexp/no-empty-alternative": "error",
+    "regexp/no-empty-capturing-group": "error",
+    "regexp/no-empty-character-class": "error",
+    "regexp/no-empty-group": "error",
+    "regexp/no-empty-lookarounds-assertion": "error",
+    "regexp/no-escape-backspace": "error",
+    "regexp/no-invalid-regexp": "error",
+    "regexp/no-lazy-ends": "error",
+    "regexp/no-misleading-capturing-group": "error",
+    "regexp/no-misleading-unicode-character": "error",
+    "regexp/no-missing-g-flag": "error",
+    "regexp/no-optional-assertion": "error",
+    "regexp/no-potentially-useless-backreference": "error",
+    "regexp/no-super-linear-backtracking": "error",
+    "regexp/no-useless-assertions": "error",
+    "regexp/no-useless-backreference": "error",
+    "regexp/no-useless-dollar-replacements": "error",
+    "regexp/strict": "error",
+    // RegExp - Best Practices
+    "regexp/confusing-quantifier": "warn",
+    "regexp/control-character-escape": "error",
+    "regexp/negation": "error",
+    "regexp/no-dupe-characters-character-class": "error",
+    "regexp/no-empty-string-literal": "error",
+    "regexp/no-extra-lookaround-assertions": "error",
+    "regexp/no-invisible-character": "error",
+    "regexp/no-legacy-features": "error",
+    "regexp/no-non-standard-flag": "error",
+    "regexp/no-obscure-range": "error",
+    "regexp/no-octal": "error",
+    "regexp/no-standalone-backslash": "error",
+    "regexp/no-trivially-nested-assertion": "error",
+    "regexp/no-trivially-nested-quantifier": "error",
+    "regexp/no-unused-capturing-group": "warn",
+    "regexp/no-useless-character-class": "error",
+    "regexp/no-useless-flag": "error",
+    "regexp/no-useless-lazy": "error",
+    "regexp/no-useless-quantifier": "error",
+    "regexp/no-useless-range": "error",
+    "regexp/no-useless-set-operand": "error",
+    "regexp/no-useless-string-literal": "error",
+    "regexp/no-useless-two-nums-quantifier": "error",
+    "regexp/no-zero-quantifier": "error",
+    "regexp/optimal-lookaround-quantifier": "warn",
+    "regexp/optimal-quantifier-concatenation": "error",
+    "regexp/prefer-predefined-assertion": "error",
+    "regexp/prefer-range": "error",
+    "regexp/prefer-set-operation": "error",
+    "regexp/simplify-set-operations": "error",
+    "regexp/use-ignore-case": "error",
+    // RegExp - Stylistic Issues (less critical, focused on consistency)
+    "regexp/match-any": "warn",
+    "regexp/no-useless-escape": "warn",
+    "regexp/no-useless-non-capturing-group": "warn",
+    "regexp/prefer-character-class": "warn",
+    "regexp/prefer-d": "warn",
+    "regexp/prefer-plus-quantifier": "warn",
+    "regexp/prefer-question-quantifier": "warn",
+    "regexp/prefer-star-quantifier": "warn",
+    "regexp/prefer-unicode-codepoint-escapes": "warn",
+    "regexp/prefer-w": "warn",
+    "regexp/sort-flags": "warn"
   },
   "overrides": [
     {

app/composables/useStructuredFilters.ts

@@ -42,7 +42,7 @@ export function parseSearchOperators(input: string): ParsedSearchOperators {
 
   // Regex to match operators: name:value, desc:value, description:value, kw:value, keyword:value
   // Value continues until whitespace or next operator
-  const operatorRegex = /\b(name|desc|description|kw|keyword):([^\s]+)/gi
+  const operatorRegex = /\b(name|desc|description|kw|keyword):(\S+)/gi
 
   let remaining = input
   let match

app/pages/search.vue

@@ -303,7 +303,7 @@ function isValidNpmName(name: string): boolean {
   // Must start with alphanumeric
   if (!/^[a-z0-9]/i.test(name)) return false
   // Can contain alphanumeric, hyphen, underscore
-  return /^[a-z0-9_-]+$/i.test(name)
+  return /^[\w-]+$/.test(name)
 }
 
 /** Validated user/org suggestion */

app/utils/formatters.ts

@@ -31,10 +31,9 @@ export function formatCompactNumber(
 
   const fmt = (n: number) => {
     if (decimals <= 0) return Math.round(n).toString()
-    return n
-      .toFixed(decimals)
-      .replace(/\.0+$/, '')
-      .replace(/(\.\d*?)0+$/, '$1')
+    const fixed = n.toFixed(decimals)
+    // Remove trailing zeros after decimal point
+    return fixed.includes('.') ? fixed.replace(/0+$/, '').replace(/\.$/, '') : fixed
   }
 
   const join = (suffix: string, n: number) => `${sign}${fmt(n)}${space ? ' ' : ''}${suffix}`

app/utils/npm/outdated-dependencies.ts

@@ -20,7 +20,7 @@ export interface OutdatedDependencyInfo {
  */
 export function constraintIncludesPrerelease(constraint: string): boolean {
   return (
-    /-(alpha|beta|rc|next|canary|dev|preview|pre|experimental)/i.test(constraint) ||
+    /-(?:alpha|beta|rc|next|canary|dev|preview|pre|experimental)/i.test(constraint) ||
     /-\d/.test(constraint)
   )
 }

cli/src/schemas.ts

@@ -3,7 +3,7 @@ import validateNpmPackageName from 'validate-npm-package-name'
 
 // Validation pattern for npm usernames/org names
 // These follow similar rules: lowercase alphanumeric with hyphens, can't start/end with hyphen
-const NPM_USERNAME_RE = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/i
+const NPM_USERNAME_RE = /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/i
 
 // ============================================================================
 // Base Schemas

knip.ts

@@ -42,6 +42,7 @@ const config: KnipConfig = {
 
         /** Oxlint plugins don't get picked up yet */
         '@e18e/eslint-plugin',
+        'eslint-plugin-regexp',
       ],
       ignoreUnresolved: ['#components', '#oauth/config'],
     },

package.json

@@ -116,6 +116,7 @@
     "@vitest/coverage-v8": "4.0.18",
     "@vue/test-utils": "2.4.6",
     "axe-core": "4.11.1",
+    "eslint-plugin-regexp": "3.0.0",
     "fast-check": "4.5.3",
     "h3": "1.15.5",
     "knip": "5.83.0",

pnpm-lock.yaml

@@ -3,7 +3,7 @@ import { CACHE_MAX_AGE_ONE_HOUR } from '#shared/utils/constants'
 const NPM_REGISTRY = 'https://registry.npmjs.org'
 
 // Validation pattern for npm org names (alphanumeric with hyphens)
-const NPM_ORG_NAME_RE = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/i
+const NPM_ORG_NAME_RE = /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/i
 
 function validateOrgName(name: string): void {
   if (!name || name.length > 50 || !NPM_ORG_NAME_RE.test(name)) {