Ofri Peretz

IC5/M2 Leader @ Snappy US. Building revenue APIs & AI-ready ESLint plugins. Expert in distributed teams, scalable infra, and fostering a culture of craftsmanship.

Austin, Texas, USA Joined on Dec 19, 2025 https://ofriperetz.dev?utm_source=devto&utm_medium=profile&utm_campaign=website-field

Education

Work

Engineering Manager @ Snappy | Open Source Developer | ESLint for AI tools

Pinned

Ofri Peretz

Jan 2

eslint-plugin-import Spends 148s Finding Circular Deps in 5,000 Files. import-next Does It in 2.7s.

#eslint #javascript #performance #benchmark

5 min read

Ofri Peretz

Dec 31 '25

I Inherited a 3,000-Line Codebase. One ESLint Run Found 26 Critical Security Bugs.

#eslint #security #node #devsecops

4 min read

Ofri Peretz

May 31

Getting Started with eslint-plugin-mongodb-security

#security #node #devsecops #eslint

3 min read

Want to connect with Ofri Peretz?

Create an account to connect with Ofri Peretz. You can also sign in below to proceed if you already have an account.

Create Account

Already have an account? Sign in

Ofri Peretz

May 31

Three SQL Injection Patterns That Still Ship in Node.js — And the ESLint Rule That Catches Them

#security #postgres #node #eslint

5 min read

Ofri Peretz

May 31

Claude vs Gemini Across 4 Security Domains: A Dead Heat — and the Hardening 63% of AI Code Skips

#ai #security #googleai #eslint

8 min read

Ofri Peretz

May 30

The Bug That Passes Every Toolchain Check: Circular Dependencies in JavaScript

#javascript #typescript #eslint #node

7 min read

Ofri Peretz

May 30

Payload CMS Has 508 Circular Dependencies. Next.js Has 17. Here's Why They Form in Every Large JS Codebase.

#eslint #javascript #typescript #node

10 min read

Ofri Peretz

May 30

Math.random() Is Not Secure. I Found It Generating API Keys in a 44K-Star Repo.

#security #javascript #node #devsecops

5 min read

Ofri Peretz

May 30

Same NestJS Prompt. Claude Got 6 Security Errors. Gemini Got 2. Here's What Both Got Wrong.

#ai #security #googleai #geminichallenge

6 min read

Ofri Peretz

May 29

5 Cycles Invisible in 14,556 Files. The Cache Bug That Hid Them.

#eslint #javascript #node #typescript

7 min read

Ofri Peretz

May 29

import-next/no-cycle Reported 0 Cycles on Next.js. We Found Why — and Fixed It.

#eslint #javascript #node #webdev

5 min read

Ofri Peretz

May 29

Claude Wrote a NestJS Service. TypeScript Was Happy. ESLint Found 6 Security Holes.

#ai #security #node #devsecops

10 min read

Ofri Peretz

May 28

I Inherited a NestJS Codebase. The First Lint Run Found 6 Vulnerabilities.

#nestjs #security #node #devsecops

5 min read

Ofri Peretz

May 25

I Benchmarked 17 ESLint Security Plugins. Only One Found Every Vulnerability.

#security #eslint #javascript #benchmark

9 min read

Ofri Peretz

May 24

no-cycle finds 0 cycles in next.js (and other lies caches tell you)

#eslint #staticanalysis #performance #algorithms

5 min read

Ofri Peretz

May 17

Aggregate Benchmarks Lie. Here's What 700 AI Functions Look Like by Security Domain.

#ai #security #googleai #javascript

12 min read

Ofri Peretz

May 14

What ground truth caught that unit tests missed: 3 real bugs in 9 flagship lint rules

#staticanalysis #eslint #testing #benchmarks

7 min read

Ofri Peretz

Feb 11

We Ranked 5 AI Models by Security. The Leaderboard Is Wrong.

#ai #security #googleai #gemini

9 min read

Ofri Peretz

Feb 8

The AI Hydra Problem: Fix One AI Bug, Get Two More

#ai #security #javascript #eslint

12 min read

Ofri Peretz

Feb 8

Microsoft's SDL ESLint Plugin Caught 3 of My Node Vulns; the Domain Plugins Caught 46 — It's a Frontend Tool

#security #eslint #javascript #benchmark

4 min read

Ofri Peretz

Feb 8

SonarJS Has 269 Rules and Found 13 Security Issues Where the Domain Plugins Found 46 — It's a Quality Linter

#security #eslint #javascript #benchmark

4 min read

Ofri Peretz

Feb 6

eslint-plugin-security Is the 14-Rule Generic Floor. Here's the Domain Depth to Layer on Top.

#security #eslint #javascript #node

4 min read

Ofri Peretz

Feb 6

I Let Claude Write 80 Functions. 65-75% Had Security Vulnerabilities.

#ai #security #eslint #javascript

12 min read

Ofri Peretz

Jan 2

PostgreSQL's COPY FROM Can Read /etc/passwd Into Your Database. One ESLint Rule Blocks It.

#eslint #postgres #security #node

5 min read

Ofri Peretz

Jan 2

One INSERT Loop Made Our CSV Import 500x Slower. One ESLint Rule Catches It Before It Ships.

#eslint #postgres #performance #node

4 min read

Ofri Peretz

Jan 2

search_path Hijacking: the PostgreSQL Attack That Turns SELECT * FROM users Into the Attacker's Table

#eslint #postgres #security #node

4 min read

Ofri Peretz

Jan 2

Your Express App Has No Helmet, No Rate Limit, and a ReDoS in Its Routes. 10 ESLint Rules Catch the Middleware You Forgot.

#eslint #express #security #node

5 min read

Ofri Peretz

Jan 2

NestJS Hands You Guards, Pipes, and Throttlers. Your Controllers Ship Without Them. 6 ESLint Rules Catch What You Forgot.

#eslint #nestjs #security #node

5 min read

Ofri Peretz

Jan 2

An SSRF in Your Lambda Steals the Execution Role. Action: '*' Hands Over the Account. 14 ESLint Rules Break the Chain.

#eslint #aws #lambda #serverless

6 min read

Ofri Peretz

Jan 2

Your Frontend Stores JWTs in localStorage and Posts to '*'. 45 ESLint Rules Catch What the Backend Audit Misses.

#eslint #javascript #security #browser

6 min read

Ofri Peretz

Jan 2

jsonwebtoken Will Verify a Token Signed With algorithm: none. These 13 ESLint Rules Stop It.

#eslint #jwt #security #authentication

5 min read

Ofri Peretz

Jan 2

MD5, exec(), and Zip Slip: 34 ESLint Rules That Fail Your Node.js CI Before They Ship.

#eslint #node #security #cryptography

6 min read

Ofri Peretz

Jan 2

Performance at Scale: The Static Analysis Standard for 100x Faster Linting

#eslint #javascript #imports #tutorial

2 min read

Ofri Peretz

Dec 31 '25

Your Vercel AI SDK Agent Has 19 Attack Surfaces. Here's an ESLint Rule for Each.

#eslint #ai #security #vercel

10 min read

Ofri Peretz

Dec 31 '25

BEGIN on a Postgres Pool Scatters Your Transaction Across Connections. One ESLint Rule Stops It.

#eslint #postgres #node #database

4 min read

Ofri Peretz

Dec 31 '25

A Missing client.release() Exhausted Our Postgres Pool at 3 AM. The ESLint Rule That Catches It.

#eslint #postgres #node #database

4 min read

Ofri Peretz

Dec 31 '25

A Hardcoded sk_live_ Key Passes Code Review. It Won't Pass These 27 ESLint Rules.

#eslint #security #javascript #tutorial

7 min read

Ofri Peretz

Dec 31 '25

pg Lets You Concatenate SQL, Hijack search_path, and Leak Every Connection. 13 ESLint Rules Say No.

#eslint #postgres #node #database

6 min read

Ofri Peretz

Dec 31 '25

8 of the OWASP Top 10 Are ESLint Rules. 2 Aren't — and That's the Honest Audit Answer.

#eslint #security #owasp #devsecops

8 min read

Ofri Peretz

Dec 31 '25

13 Security Questions Every JavaScript Interview Asks — and the ESLint Rule That Answers Each in CI

#eslint #career #security #javascript

5 min read

Ofri Peretz

Dec 31 '25

The JWT alg:none Attack: Change One Header Field, Forge an Admin Token. One ESLint Rule Blocks It.

#eslint #security #jwt #node

3 min read

Ofri Peretz

Dec 31 '25

'3 Lines of Vercel AI SDK Code Are a Prompt-Injection Hole — and "Just Sanitize It" Won''t Close It'

#eslint #ai #security #vercel

4 min read

Ofri Peretz

Dec 31 '25

Your node-postgres Data Layer Fails 4 Ways in Production. SQL Injection Is Only the First.

#eslint #postgres #node #security

4 min read

Ofri Peretz

Dec 31 '25

AI Coding Assistants Hardcode Secrets. This ESLint Rule Catches Them — in a Format the AI Can Auto-Fix.

#eslint #javascript #security #devops

5 min read

Ofri Peretz

Dec 31 '25

Post-Mortem: Why ESLint Performance Failed (And the 100x Fix)

#eslint #javascript #performance #typescript

2 min read

Ofri Peretz

Dec 20 '25

Same Vulnerable File, 4 Linters: Oxlint Native Caught 1, eslint-plugin-security 21, Interlace 46

#eslint #security #javascript #webdev

5 min read

Ofri Peretz

Dec 20 '25

Your Vercel AI SDK Agent Can Delete Your Database. 5 ESLint Rules That Gate Every Tool Call.

#eslint #ai #security #vercel

5 min read

Ofri Peretz

Dec 19 '25

Your Vercel AI SDK App vs the OWASP LLM Top 10: 8 Categories ESLint Catches in CI — and 2 It Honestly Can't.

#eslint #ai #security #owasp

4 min read

Ofri Peretz

Dec 19 '25

Your Vercel AI SDK App Has a Prompt Injection Vulnerability — in 1 of 3 Places. Here's the ESLint Rule for Each.

#eslint #vercel #ai #security

4 min read

2 Week Community Wellness Streak

1 Week Community Wellness Streak

Top 7

Writing Debut

Want to connect with Ofri Peretz?