Ofri Peretz

IC5/M2 Leader @ Snappy US. Building revenue APIs & AI-ready ESLint plugins. Expert in distributed teams, scalable infra, and fostering a culture of craftsmanship.

Austin, Texas, USA Joined on Dec 19, 2025 https://ofriperetz.dev?utm_source=devto&utm_medium=profile&utm_campaign=website-field

Education

Work

Engineering Manager @ Snappy | Open Source Developer | ESLint for AI tools

Pinned

Ofri Peretz

Jan 2

eslint-plugin-import Spends 148s Finding Circular Deps in 5,000 Files. import-next Does It in 2.7s.

#eslint #ai #googleai #geminichallenge

12 min read

Ofri Peretz

Dec 31 '25

I Inherited a 3,000-Line Codebase. 30 Minutes of ESLint Found 26 Critical Bugs.

#security #node #ai #devsecops

6 min read

Ofri Peretz

May 31

Your MongoDB Login Can Be Bypassed With No Password and No Quotes. The ESLint Plugin That Catches It.

#security #node #devsecops #ai

6 min read

Want to connect with Ofri Peretz?

Create an account to connect with Ofri Peretz. You can also sign in below to proceed if you already have an account.

Create Account

Already have an account? Sign in

Ofri Peretz

May 31

Three SQL Injection Patterns That Still Ship in Node.js — And the ESLint Rule That Catches Them

#ai #security #node #postgres

7 min read

Ofri Peretz

May 31

Claude vs Gemini Across 4 Security Domains: A Dead Heat — and the Hardening 63% of AI Code Skips

#ai #security #googleai #eslint

8 min read

Bundler trade-offs and hidden CI slowdowns

Ofri Peretz

May 30

The Bug That Passes Every Toolchain Check: Circular Dependencies in JavaScript

#javascript #typescript #eslint #node

7 min read

Ofri Peretz

May 30

Payload CMS Has 508 Circular Dependencies. Next.js Has 17. Here's Why They Form in Every Large JS Codebase.

#eslint #javascript #typescript #node

12 min read

Ofri Peretz

May 30

Math.random() Is Not Secure. I Found It Generating API Keys in a 44K-Star Repo.

#security #javascript #node #devsecops

5 min read

Ofri Peretz

May 30

Same NestJS Prompt. Claude Got 6 Security Errors. Gemini Got 2. Here's What Both Got Wrong.

#ai #security #node #geminichallenge

10 min read

Ofri Peretz

May 29

5 Cycles Invisible in 14,556 Files. The Cache Bug That Hid Them.

#eslint #node #ai #javascript

10 min read

Ofri Peretz

May 29

Our no-cycle Rule Reported 0 Cycles on Next.js. oxlint Found 17. Here's the Bug.

#eslint #node #javascript #ai

12 min read

Ofri Peretz

May 29

Claude Wrote a NestJS Service. TypeScript Was Happy. ESLint Found 6 Security Holes.

#ai #security #node #eslint

12 min read

Ofri Peretz

May 28

I Inherited a NestJS Codebase. 12 Seconds of ESLint Found 47 Violations Across 6 Vulnerability Classes.

#security #node #ai #devsecops

8 min read

Ofri Peretz

May 25

The #1 ESLint Security Plugin Has 1.5M Downloads and Caught 0 of My 40 Vulnerabilities

#security #eslint #node #ai

12 min read

Ofri Peretz

May 24

Our cycle detector reported 0. The real number was 245 files.

#eslint #node #ai #javascript

8 min read

Ofri Peretz

May 17

Aggregate Benchmarks Lie. Here's What 700 AI Functions Look Like by Security Domain.

#ai #security #googleai #eslint

15 min read

Ofri Peretz

May 14

A 5KB corpus that runs in 3 seconds found 3 bugs months of unit tests missed

#eslint #testing #ai #security

10 min read

Ofri Peretz

Feb 11

We Ranked 5 AI Models by Security. The Leaderboard Is Wrong.

#ai #security #googleai #gemini

9 min read

Ofri Peretz

Feb 8

The AI Hydra Problem: Fix One AI Bug, Get Two More

#ai #security #javascript #eslint

12 min read

Ofri Peretz

Feb 8

Microsoft's SDL ESLint Plugin Caught 3 Node Vulns. The Domain Plugins Caught 46 — Same File, Wrong Layer

#security #node #ai #eslint

9 min read

Ofri Peretz

Feb 8

SonarJS Has 269 Rules. On 40 Vulnerabilities It Caught 14 — It Misses 65% of the Security Surface.

#security #ai #eslint #geminichallenge

9 min read

Ofri Peretz

Feb 6

Same File: eslint-plugin-security Caught 21, the Domain Plugins Caught 46. It's a Floor, Not a Ceiling.

#security #node #ai #eslint

8 min read

Ofri Peretz

Feb 6

I Let Claude Write 80 Functions. 65-75% Had Security Vulnerabilities.

#ai #security #eslint #javascript

14 min read

Ofri Peretz

Jan 2

PostgreSQL's COPY FROM Can Read /etc/passwd Into Your Database. One ESLint Rule Blocks It.

#security #node #ai #devsecops

7 min read

Ofri Peretz

Jan 2

One INSERT Loop Made Our CSV Import 500x Slower. One ESLint Rule Catches It Before It Ships.

#node #performance #ai #eslint

7 min read

Ofri Peretz

Jan 2

search_path Hijacking: the PostgreSQL Attack That Turns SELECT * FROM users Into the Attacker's Table

#security #node #postgres #ai

7 min read

Ofri Peretz

Jan 2

Your Express App Has No Helmet, No Rate Limit, and a ReDoS in Its Routes. 14 ESLint Rules Catch the Middleware You Forgot.

#eslint #express #security #ai

8 min read

Ofri Peretz

Jan 2

NestJS Hands You Guards, Pipes, and Throttlers. You — and Your AI — Ship Controllers Without Them. 6 ESLint Rules Catch It.

#eslint #nestjs #security #ai

8 min read

Ofri Peretz

Jan 2

An SSRF in Your Lambda Steals the Execution Role. Action: '*' Hands Over the Account. 14 ESLint Rules Break the Chain.

#eslint #security #aws #ai

9 min read

Ofri Peretz

Jan 2

Your Frontend Stores JWTs in localStorage and Posts to '*'. 45 ESLint Rules Catch What the Backend Audit Misses.

#eslint #javascript #security #ai

9 min read

Ofri Peretz

Jan 2

jsonwebtoken Will Verify a Token Signed With algorithm: none. These 13 ESLint Rules Stop It.

#security #ai #node #geminichallenge

11 min read

Ofri Peretz

Jan 2

MD5, exec(), and Zip Slip: 34 ESLint Rules That Fail Your Node.js CI Before They Ship.

#security #node #ai #eslint

8 min read

Ofri Peretz

Jan 2

Performance at Scale: The Static Analysis Standard for 100x Faster Linting

#eslint #javascript #imports #tutorial

2 min read

Ofri Peretz

Dec 31 '25

Your Vercel AI SDK Agent Has 19 Attack Surfaces. Here's an ESLint Rule for Each.

#security #ai #eslint #googleai

16 min read

Ofri Peretz

Dec 31 '25

BEGIN on a Postgres Pool Scatters Your Transaction Across Connections. One ESLint Rule Stops It.

#eslint #node #ai #javascript

6 min read

Ofri Peretz

Dec 31 '25

A Missing client.release() Exhausted Our Postgres Pool at 3 AM. The ESLint Rule That Catches It.

#eslint #node #security #devsecops

9 min read

Ofri Peretz

Dec 31 '25

A Hardcoded sk_live_ Key Passes Code Review. It Won't Pass These 27 ESLint Rules.

#eslint #security #javascript #ai

10 min read

Ofri Peretz

Dec 31 '25

node-postgres Will Happily Build a CVSS 9.8 SQL Injection For You. 13 ESLint Rules Say No.

#eslint #security #node #ai

9 min read

Ofri Peretz

Dec 31 '25

I Mapped the OWASP Top 10 to ESLint Rules. 8 Hold Up. 2 Are Vendor Theater.

#security #ai #node #devsecops

10 min read

Ofri Peretz

Dec 31 '25

13 Security Questions Every JS Interview Asks — and Why Reciting Them Won't Stop You Shipping the Bug

#security #ai #node #javascript

8 min read

Ofri Peretz

Dec 31 '25

The JWT alg:none Attack: Change One Header Field, Forge an Admin Token. One ESLint Rule Blocks It.

#security #node #ai #eslint

5 min read

Ofri Peretz

Dec 31 '25

'3 Lines of Vercel AI SDK Code Are a Prompt-Injection Hole — and "Just Sanitize It" Won''t Close It'

#security #ai #javascript #eslint

9 min read

Ofri Peretz

Dec 31 '25

Your node-postgres Data Layer Fails 4 Ways in Production. SQL Injection Is Only the First.

#security #node #eslint #ai

7 min read

Ofri Peretz

Dec 31 '25

AI Coding Assistants Hardcode Secrets. This ESLint Rule Catches Them — in a Format the AI Can Auto-Fix.

#security #ai #eslint #javascript

7 min read

Ofri Peretz

Dec 31 '25

Post-Mortem: Why ESLint Performance Failed (And the 100x Fix)

#eslint #javascript #performance #typescript

2 min read

Ofri Peretz

Dec 20 '25

Same Vulnerable File, 4 Linters: Your Security Plugin Caught 21 of 46. Oxlint Native Caught 1.

#security #node #javascript #eslint

8 min read

Ofri Peretz

Dec 20 '25

Your Vercel AI SDK Agent Can Delete Your Database. 5 ESLint Rules That Gate Every Tool Call.

#eslint #ai #security #node

6 min read

Ofri Peretz

Dec 19 '25

Your Vercel AI SDK App vs the OWASP LLM Top 10: 8 Categories ESLint Catches in CI — and 2 It Honestly Can't.

#security #ai #owasp #geminichallenge

9 min read

Ofri Peretz

Dec 19 '25

Your Vercel AI SDK App Has a Prompt Injection Vulnerability — in 1 of 3 Places. Here's the ESLint Rule for Each.

#eslint #ai #security #node

6 min read

2 Week Community Wellness Streak

1 Week Community Wellness Streak

Top 7

Writing Debut

Want to connect with Ofri Peretz?