PluginStatseslint-plugin-security-node weekly downloads statistics
By gkouziik · npm · ESLint plugins
Create a security plugin for node.js
eslint-plugin-security-node has 21,703 recorded weekly downloads on npm, a decrease of 50.5% over the past 30 days, ranking #770 of 2,391 tracked listings.
About eslint-plugin-security-node
eslint-plugin-security-node
ESLint plugin containing Node.js security rules
This plugin will help to identify potential threats and prevent attacks.
Installation
npm install --save-dev eslint-plugin-security-node
Usage
Add the following configuration to your .eslintrc file:
"plugins": [
"security-node"
],
"extends": [
"plugin:security-node/recommended"
]
Developer guide
- Use GitHub pull requests
- Check the .eslintrc file to see the ESLint setup
Tests
Type the following to test all the rules:
$ npm test
Type the following to test a particular rule:
$ ./node_modules/.bin/mocha tests/lib/rules/rule_name
Rules
detect non literal regular expr
For details check the documentation file non-literal-reg-expr
detect absence of property:name in express-session
For details check the documentation file detect-absence-of-name-option-in-exrpress-session
detect Buffer unsafe allocation
For details check the documentation file detect-buffer-unsafe-allocation
detect exec of child_process with non-Literal argument
For details check the documentation file detect-child-process
detect crlf attack
For details check the documentation file detect-crlf
detect dangerous redirects
For more information check the documentation file detect-dangerous-redirects
detect-eval-with-expr
For more information check the documentation file detect-eval-with-expr
detect-html-injection
For more information check the documentation file detect-html-injection
detect-insecure-randomness
For more information check the documentation file detect-insecure-randomness
detect-non-literal-require-calls
For more information check the documentation file detect-non-literal-require-calls
detect-nosql-injection
For more information check the documentation file detect-nosql-injection
detect-option-multiplestatements-in-mysql
For more information check the documentation file detect-option-multiplestatements-in-mysql
detect-option-rejectunauthorized-in-nodejs-httpsrequest
For more information check the documentation file detect-option-rejectunauthorized-in-nodejs-httpsrequest
detect-option-unsafe-in-serialize-javascript-npm-package
For more information check the documentation file detect-option-unsafe-in-serialize-javascript-npm-package
detect-possible-timing-attacks
For more information check the documentation file detect-possible-timing-attacks
detect-runinthiscontext-method-in-nodes-vm
For more information check the documentation file detect-runinthiscontext-method-in-nodes-vm.
detect-security-missconfiguration-cookie
For more information check the documentation file detect-security-missconfiguration-cookie
detect-sql-injection
For more information check the documentation file detect-sql-injection
disable-ssl-across-node-server
For more information check the documentation file disable-ssl-across-node-server
detect-improper-exception-handling
For more information check the documentation file detect-improper-exception-handling
detect-unhandled-async-errors
For more information check the documentation file detect-unhandled-async-errors
detect-unhandled-event-errors…
Description from the npm listing.
- eslint
- eslintplugin
- eslint-plugin
- nodesecurity
- security
README badge
Show your rank in a README or on your website. The badge updates automatically.
Charts
Images: 30d · 1y · all time · 1600×900 dark
Adoption over time
7/30/90-day growth
Ranking history
Listing placement
Listing placement
Filled points are observed values; hollow points come from Internet Archive snapshots of the listing page. Dashed segments span periods with no observations — values between points are not interpolated.
Each band is one page of 20. Weekly downloads on a linear scale. Placement is projected from weekly downloads, so it can differ from the marketplace's own sort order. Hover a dot to see the listing.
Recent observations
Full history (122)Similar npm ESLint plugins plugins
All 20 eslint-plugin-security-node alternatives- 20.4K weekly downloads-70.4%
Data source
Weekly downloads (trailing 7 complete days) come from the official npm downloads API. Downloads include CI and mirrors and are not equivalent to installs or users. npm publishes no ratings.
Listing: https://www.npmjs.com/package/eslint-plugin-security-node. First seen Oct 16, 2026; last successful collection Oct 21, 2026. See the methodology.