Ofri Peretz

IC5/M2 Leader @ Snappy US. Building revenue APIs & AI-ready ESLint plugins. Expert in distributed teams, scalable infra, and fostering a culture of craftsmanship.

Austin, Texas, USA Joined on Dec 19, 2025 https://ofriperetz.dev?utm_source=devto&utm_medium=profile&utm_campaign=website-field

Education

Work

Engineering Manager @ Snappy | Open Source Developer | ESLint for AI tools

Pinned

Ofri Peretz

Jan 2

eslint-plugin-import Spends 148s Finding Circular Deps in 5,000 Files. import-next Does It in 2.7s.

#eslint #node #ai #devsecops

18 min read

Ofri Peretz

Dec 31 '25

The 30-Minute Security Audit: 140 Gemini-Written Functions, 102 Shipped Vulnerable

#security #node #devsecops #javascript

12 min read

Ofri Peretz

Jul 28

I Audited 203 of Our Own ESLint Security Rules. 16% Mislabel Their Own CVSS Score.

#security #node #devsecops #eslint

9 min read

Want to connect with Ofri Peretz?

Create an account to connect with Ofri Peretz. You can also sign in below to proceed if you already have an account.

Create Account

Already have an account? Sign in

Ofri Peretz

Jul 20

142,076 Weekly Downloads. Zero Releases Since 2021. Is the Niche Defended?

#serverless #aws #opensource #node

9 min read

Ofri Peretz

Jul 20

We Were Wrong About sls remove

#serverless #aws #devops #node

8 min read

Ofri Peretz

Jul 20

25% of My Benchmark Verdict Is an Opinion. Here's the Anatomy.

#serverless #devops #node #aws

8 min read

Ofri Peretz

Jul 20

Marketing Pages Rot Silently. Mine Print an Expiry Date on Every Claim.

#security #devsecops #node #javascript

8 min read

Ofri Peretz

Jul 20

Fixtures First, Rules Second: How to Design a Ground-Truth Corpus

#security #devsecops #eslint #javascript

9 min read

Ofri Peretz

Jul 19

Valid vs. Reliable Metrics: Consistent Numbers Can Still Be Wrong

#security #devsecops #node #javascript

7 min read

Ofri Peretz

Jul 19

Static Analysis vs. SAST vs. Linting: The Taxonomy That Matters for Security Teams

#security #devsecops #node #javascript

8 min read

Ofri Peretz

Jul 19

Sample Size and Statistical Power: What a Small Sample Can and Cannot Tell You

#security #devsecops #node #javascript

8 min read

Ofri Peretz

Jul 19

Proxy Metrics: The Number You Optimize Is Not the Thing You Want

#security #devsecops #node #javascript

8 min read

Ofri Peretz

Jul 19

Precision, Recall, and F1 for Static Analysis: Same Score, Opposite Tools

#security #devsecops #node #javascript

8 min read

Ofri Peretz

Jul 19

Taint vs. Heuristic Detection: The Difference Between a Proof and a Hunch

#security #eslint #devsecops #javascript

7 min read

Ofri Peretz

Jul 19

Statistical Significance and p-Values: What p > 0.05 Actually Means

#security #devsecops #node #javascript

8 min read

Ofri Peretz

Jul 19

Reproducibility vs Replicability: Why Benchmark Numbers Need Both

#security #devsecops #node #javascript

7 min read

Ofri Peretz

Jul 19

Ranking vs. Measuring: What a Leaderboard Throws Away

#security #devsecops #node #javascript

8 min read

Ofri Peretz

Jul 19

OWASP Top 10, Explained: An Address System, Not a Severity Scale

#security #devsecops #node #javascript

8 min read

Ofri Peretz

Jul 19

Ground Truth in Security Testing: Who Decides What's Vulnerable?

#security #devsecops #node #javascript

8 min read

Ofri Peretz

Jul 19

The CWE Taxonomy, Explained: A Name Is Not a Verdict

#security #devsecops #node #javascript

8 min read

Ofri Peretz

Jul 19

CVSS Scores Explained: The Number Measures Severity, Not Risk

#security #devsecops #node #javascript

8 min read

Ofri Peretz

Jul 19

Composite Scores and Weighting: Your 'Overall Score' Is an Editorial

#security #devsecops #node #javascript

8 min read

Ofri Peretz

Jul 19

The Confusion Matrix: What TP, FP, FN, and TN Actually Mean

#security #devsecops #node #javascript

8 min read

Ofri Peretz

Jul 18

Inter-Rater Agreement and Cohen's Kappa: When Your Labels Are Opinions

#security #devsecops #node #javascript

7 min read

Ofri Peretz

Jul 18

I Built What I Benchmark. Here's How I Try Not to Cheat.

#security #eslint #devsecops #javascript

9 min read

Ofri Peretz

Jul 18

Goodhart's Law in Benchmarking: When the Metric Becomes the Target

#security #devsecops #node #javascript

7 min read

Ofri Peretz

Jul 18

I Maintain 23 Benchmark Suites Across My Own Packages. Only 1 of the Serverless Ones Has Real Numbers Yet.

#security #devsecops #eslint #node

9 min read

Ofri Peretz

Jul 18

Bias in Measurement: The Silent Failure Mode in Benchmark Design

#security #devsecops #node #javascript

8 min read

Ofri Peretz

Jul 18

The Base Rate Problem: Why 95% Precision Means Nothing Without Context

#security #devsecops #node #javascript

7 min read

The failure of positive-only testing

Ofri Peretz

Jul 4

My credential rule reported 842 secrets in vercel/ai. The real count was 0.

#security #node #devsecops #javascript

11 min read

Ofri Peretz

May 31

MongoDB Injection Bugs Your Code Review Misses: 4 Shapes, 16 ESLint Rules, 1 Honest Gap

#security #node #devsecops #eslint

21 min read

Ofri Peretz

May 31

Gemini 2.5 Pro Wrote Unsafe SQL 96% of the Time: 3 Node.js Injection Patterns — and the ESLint Rule That Catches Them

#security #node #database #eslint

12 min read

Ofri Peretz

May 31

Claude vs Gemini Across 4 Security Domains: A Dead Heat — and the Hardening 63% of AI Code Skips

#ai #security #googleai #eslint

9 min read

Bundler trade-offs and hidden CI slowdowns

Ofri Peretz

May 30

The Bug That Passes Every Toolchain Check: Circular Dependencies in JavaScript

#javascript #typescript #eslint #node

8 min read

Ofri Peretz

May 30

Payload CMS Has 508 Circular Dependencies. Next.js Has 17. Here's Why They Form in Every Large JS Codebase.

#eslint #javascript #typescript #node

10 min read

Ofri Peretz

May 30

Math.random() Is Not Secure. I Found It Generating API Keys in a 44K-Star Repo.

#security #javascript #node #devsecops

6 min read

Ofri Peretz

May 30

Same NestJS Prompt. Claude Got 6 Security Errors. Gemini Got 2. Here's What Both Got Wrong.

#ai #security #googleai #geminichallenge

13 min read

Ofri Peretz

May 29

5 Cycles Invisible in 14,556 Files. The Cache Bug That Hid Them.

#javascript #nextjs #node #eslint

13 min read

Ofri Peretz

May 29

eslint-plugin-import Has 38M Weekly Downloads. Here's What It Still Gets Wrong.

#node #eslint #devsecops #security

13 min read

Ofri Peretz

May 29

Claude Wrote a NestJS Service. TypeScript Was Happy. ESLint Found 6 Security Holes.

#ai #security #nestjs #eslint

20 min read

Ofri Peretz

May 28

I Inherited a NestJS Codebase. One 12-Second ESLint Run Found 47 Violations Across 6 Vulnerability Classes.

#security #nestjs #eslint #devsecops

18 min read

Ofri Peretz

May 25

1.5M Weekly Downloads, 1 False Alarm per Real Bug: the eslint-plugin-security False-Positive Tax

#security #eslint #devsecops #javascript

31 min read

Ofri Peretz

May 25

The #1 ESLint Security Plugin Just Got Fixed. It Still Catches 0 of 6 SQL Injections.

#security #eslint #devsecops #javascript

32 min read

Ofri Peretz

May 24

Our linter reported 0 cycles. A cache bug hid 245 files at scale.

#javascript #node #performance #eslint

18 min read

Ofri Peretz

May 17

Aggregate Benchmarks Lie. Here's What 700 AI Functions Look Like by Security Domain.

#ai #security #eslint #devsecops

27 min read

Ofri Peretz

May 14

2 of 3 bugs a 5KB corpus caught were the exact shapes AI writes by default

#security #node #devsecops #eslint

15 min read

Ofri Peretz

Feb 11

We Ranked 5 AI Models by Security. The Leaderboard Is Wrong.

#ai #security #javascript #devsecops

15 min read

Ofri Peretz

Feb 8

I Asked Claude to Fix Its Own Security Bugs. 1 in 3 Fixes Added a NEW Vulnerability.

#ai #security #javascript #devsecops

26 min read

Ofri Peretz

Feb 8

Microsoft's SDL ESLint Plugin Caught 5 Node Vulns. The Domain Plugins Caught 46 — Same File, Wrong Layer

#security #eslint #devsecops #javascript

18 min read

Ofri Peretz

Feb 8

SonarJS Has 269 Rules. It Still Missed 26 of My 40 Node.js Vulnerabilities.

#security #eslint #devsecops #javascript

14 min read

Ofri Peretz

Feb 6

eslint-plugin-security Caught 21 Issues. The Domain Plugins Caught 46. Here's the 25-Finding Gap.

#security #node #devsecops #javascript

14 min read

Ofri Peretz

Feb 6

I Let Claude Write 80 Functions. 65-75% Had Security Vulnerabilities.

#ai #security #javascript #devsecops

32 min read

Ofri Peretz

Jan 2

PostgreSQL's COPY FROM Can Read /etc/passwd Into Your Database — One ESLint Rule Blocks It.

#security #node #database #devsecops

16 min read

Ofri Peretz

Jan 2

One INSERT Loop Made Our CSV Import 500x Slower. One ESLint Rule Catches It Before It Ships.

#node #database #performance #devsecops

11 min read

Ofri Peretz

Jan 2

search_path Hijacking: the PostgreSQL Attack That Turns SELECT * FROM users Into the Attacker's Table

#security #database #node #devsecops

16 min read

Ofri Peretz

Jan 2

The Express.js Vulnerability Is the Middleware You Forgot — 14 ESLint Rules That Catch What Isn't There

#security #node #devsecops #eslint

12 min read

Ofri Peretz

Jan 2

You Can't Review a Decorator That Isn't There — 6 ESLint Rules for NestJS Security

#security #nestjs #node #eslint

10 min read

Ofri Peretz

Jan 2

AWS Lambda Security Bugs Your Serverless Functions Are Shipping — 14 ESLint Rules That Catch Them in CI

#security #node #devsecops #eslint

14 min read

Ofri Peretz

Jan 2

4 Browser Security Bugs That Pass Code Review — One Lint Run, 8 CI Errors

#security #eslint #devsecops #node

15 min read

Ofri Peretz

Jan 2

JWT Vulnerabilities Your Code Review Approves Every Day — 13 ESLint Rules Stop Them in CI

#security #node #devsecops #eslint

18 min read

Ofri Peretz

Jan 2

Node.js Security Bugs That Pass Code Review Every Day — 35 Static Analysis Rules That Don't

#security #node #devsecops #javascript

12 min read

Ofri Peretz

Jan 2

no-cycle Is Commented Out in Your ESLint Config. Here Is the Two-Minute Swap That Turns It Back On.

#eslint #javascript #imports #tutorial

9 min read

2 Week Community Wellness Streak

1 Week Community Wellness Streak

Top 7

Writing Debut

Want to connect with Ofri Peretz?