eslint-config-decent/src/security.ts

A decent ESLint configuration

import type { TSESLint } from '@typescript-eslint/utils';
import security from 'eslint-plugin-security';

const base: TSESLint.FlatConfig.Config = {
  plugins: {
    security,
  },
  rules: {
    'security/detect-buffer-noassert': 'error',
    'security/detect-child-process': 'error',
    'security/detect-disable-mustache-escape': 'error',
    'security/detect-eval-with-expression': 'error',
    'security/detect-new-buffer': 'error',
    'security/detect-no-csrf-before-method-override': 'error',
    'security/detect-non-literal-fs-filename': 'error',
    'security/detect-non-literal-regexp': 'error',
    'security/detect-non-literal-require': 'error',
    'security/detect-object-injection': 'off',
    'security/detect-possible-timing-attacks': 'error',
    'security/detect-pseudoRandomBytes': 'error',
    'security/detect-unsafe-regex': 'error',
  },
};

export const configs = {
  base,
};

export default {
  configs,
};