eslint-community/eslint-plugin-security

Health v2 · maintenance only

Adoption not part of the score

2372 stars · 111 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

An ESLint plugin providing security-focused linting rules for Node.js code. It flags potential security hotspots like eval usage, unsafe child_process calls, and trojan source attacks, though it produces false positives requiring human triage.

Use cases

• lint node.js code for security issues
• detect eval with dynamic expressions
• find unsafe child_process exec calls
• detect trojan source bidi character attacks
• add security rules to eslint config
• catch buffer noassert misuse

When to choose

• you use ESLint and want automated security checks in CI
• you want to flag common Node.js security anti-patterns early
• you maintain a Node.js codebase and want defense-in-depth code review

When to avoid

• you need precise vulnerability scanning with low false positives
• you don't use ESLint or JavaScript/Node.js
• you need runtime security monitoring rather than static analysis

Facets

plugin · maturity active

security linter static-site-generator security developer-tools web-development eslint-plugin node-security code-analysis vulnerability-detection nodejs javascript

Member repositories

For agents

markdown · JSON · MCP: product_card(name="eslint-community/eslint-plugin-security")