microsoft/eslint-plugin-sdl

The **eslint‑plugin‑sdl** is a Microsoft‑maintained ESLint plugin that adds a set of security‑focused linting rules and share‑able configurations (e.g., for React, Angular, Node, Electron, TypeScript) to help developers catch common security mis‑configurations such as use of `eval`, unsafe DOM manipulation, insecure URLs, and platform‑specific hazards. It’s intended for any JavaScript/TypeScript project that follows Microsoft’s Security Development Lifecycle (SDL) and wants automated static analysis security testing via ESLint.