This repository provides an ESLint plugin that scans source code (JavaScript/TypeScript and JSON) for hard‑coded credentials or other secret strings. It offers two rules—`no‑secrets`, which uses entropy analysis and configurable regex patterns, and `no‑pattern‑match`, a grep‑style matcher—for developers who want to prevent accidental secret leakage during development.