eslint-plugin-security

eslint-plugin-security is an ESLint plugin designed to identify potential security vulnerabilities in Node.js applications. Its primary use case is to flag patterns in code that may pose security risks, helping developers to mitigate these issues while acknowledging that some identified risks may require manual review due to false positives. Notable features include a variety of customizable rules for detecting unsafe practices, such as the use of `eval`, non-literal filenames, and vulnerabilities related to buffer handling.