https://www.npmjs.com/package/eslint-plugin-security This adds linting rules that catch well know potential security issues in javascript.