Skip to main content

๏‚ญ SDL lifecycle-aware security linting ๏„ต

eslint-plugin-sdl-2

SDL-oriented ESLint rules that flag insecure APIs and unsafe patterns across browser, Node, Electron, Angular, AngularJS, and related application surfaces.

SDL lifecycle aligned

The docs theme mirrors the six-stage wheel in the project logo, from analysis through maintenance.

Cross-stack security coverage

Coverage spans browser, Node, Electron, Angular, AngularJS, and Trusted Types surfaces.

Practical adoption path

Presets, remediation docs, and safe suggestions help teams roll rules out incrementally.

  • npm license
  • npm total downloads
  • latest GitHub release
  • GitHub stars
  • GitHub forks
  • GitHub open issues

๐Ÿ›ก 52 SDL rules

Current checked-in SDL and platform-hardening rules in the plugin source.

๐Ÿงฉ 9 presets

Layer common, framework, runtime, and policy presets to match your codebase.

๐Ÿง  6 type-assisted rules

A focused set of rules opportunistically uses parser services when full TypeScript data is available.

๏„ต

Get Started

Install the plugin, enable a preset, and start with the SDL overview and first security checks.

Open section โ†’

๎š

Presets

Adopt common rules first, then layer framework and runtime-specific protections where they apply.

Open section โ†’

๏€ญ

Rule Reference

Browse every SDL rule with focused examples, rationale, and remediation guidance.

Open section โ†’