style: turn @typescript-eslint/no-unsafe-member-access rule on

eslint.config.mjs

@@ -78,7 +78,6 @@ export default ts.config(
 			'@typescript-eslint/no-unsafe-argument': 'off',
 			'@typescript-eslint/no-unsafe-assignment': 'off',
 			'@typescript-eslint/no-unsafe-call': 'off',
-			'@typescript-eslint/no-unsafe-member-access': 'off',
 
 		},
 	},

src/config.mts

@@ -1,3 +1,4 @@
+import assert from 'node:assert';
 import path from 'path';
 import { pathToFileURL } from 'url';
 
@@ -17,7 +18,9 @@ export class ConfigProvider {
 
 	async init(): Promise<void> {
 		const resolvedPath = path.resolve(this.path);
-		this.configInstance = (await import(pathToFileURL(resolvedPath).toString())).default as Config;
+		const configModule = await import(pathToFileURL(resolvedPath).toString()) as unknown;
+		assert(typeof configModule === 'object' && configModule !== null && 'default' in configModule);
+		this.configInstance = configModule.default as Config;
 	}
 
 	get config(): Config {

src/deb/deb-builder.mts

@@ -1,6 +1,7 @@
 import * as path from 'node:path';
 import { appendFile, writeFile } from 'node:fs/promises';
 import { readdirSync, readFileSync, renameSync, unlinkSync } from 'node:fs';
+import assert from 'node:assert';
 import { randomBytes } from 'node:crypto';
 import { Readable } from 'node:stream';
 
@@ -143,11 +144,13 @@ export class DebBuilder implements Deployer {
 
 	private async handleDeb(distribution: string, component: string, deb: Artifact): Promise<void> {
 		const controlTarSizeRange = { start: 120, end: 129 };
-		const controlTarSizeString =
-			(await this.artifactProvider.getArtifactContent(deb, controlTarSizeRange))
-				.read()
-				.toString()
-				.trim();
+		const controlTarSizeData = (await this.artifactProvider.getArtifactContent(deb, controlTarSizeRange)).read();
+		if (!(controlTarSizeData instanceof Buffer)) {
+			throw new Error('Invalid read result');
+		}
+		const controlTarSizeString = controlTarSizeData
+			.toString()
+			.trim();
 		const controlTarSize = parseInt(controlTarSizeString, 10);
 		const controlTarRange = { start: 132, end: 131 + controlTarSize };
 		const controlTar = await this.artifactProvider.getArtifactContent(deb, controlTarRange);
@@ -165,6 +168,7 @@ export class DebBuilder implements Deployer {
 					const controlMetaContent = readFileSync(path.join(whereExtract, 'control'), 'utf-8').replaceAll(':', '=');
 					const controlMeta = ini.parse(controlMetaContent);
 					const name = controlMeta['Package'];
+					assert(typeof name === 'string');
 					const version = controlMeta['Version'];
 					const arch = controlMeta['Architecture'];