Skip to content

DEV Community

ESLint Security Benchmark Series Series' Articles

Back to Ofri Peretz's Series

Cover image for Your ESLint security plugin is missing 58% of vulnerability classes — zero rules for 7 of 12. I have proof, and a correction: my own headline said 80%.

Dec 20 '25

Your ESLint security plugin is missing 58% of vulnerability classes — zero rules for 7 of 12. I have proof, and a correction: my own headline said 80%.

#security #node #devsecops #eslint

16 min read

Cover image for eslint-plugin-security Caught 21 Issues. The Domain Plugins Caught 46. Here's the 25-Finding Gap.

Feb 6

eslint-plugin-security Caught 21 Issues. The Domain Plugins Caught 46. Here's the 25-Finding Gap.

#security #node #devsecops #javascript

14 min read

Cover image for SonarJS Has 269 Rules. It Still Missed 26 of My 40 Node.js Vulnerabilities.

Feb 8

SonarJS Has 269 Rules. It Still Missed 26 of My 40 Node.js Vulnerabilities.

#security #eslint #devsecops #javascript

14 min read

Cover image for Microsoft's SDL ESLint Plugin Caught 5 Node Vulns. The Domain Plugins Caught 46 — Same File, Wrong Layer

Feb 8

Microsoft's SDL ESLint Plugin Caught 5 Node Vulns. The Domain Plugins Caught 46 — Same File, Wrong Layer

#security #eslint #devsecops #javascript

18 min read

Cover image for The #1 ESLint Security Plugin Just Got Fixed. It Still Catches 0 of 6 SQL Injections.

May 25

The #1 ESLint Security Plugin Just Got Fixed. It Still Catches 0 of 6 SQL Injections.

#security #eslint #devsecops #javascript

32 min read

Cover image for 1.5M Weekly Downloads, 1 False Alarm per Real Bug: the eslint-plugin-security False-Positive Tax

May 25

1.5M Weekly Downloads, 1 False Alarm per Real Bug: the eslint-plugin-security False-Positive Tax

#security #eslint #devsecops #javascript

31 min read