Changelog

• —FixA computed or quoted option key is still a JWT option.

npm install --save-dev eslint-plugin-jwt-security@3.2.1

• —FixA computed or quoted property key is still the same property.

npm install --save-dev eslint-plugin-node-security@5.4.3

• —Fixfive rules read a subscripted member the same as its dotted twin
• —Fixvalue['constructor'].name is the same brittle type check
• —Fixthis['password'] and req['body'] read the same as their dotted twins
• —Dependenciesupdated workspace dependencies: @interlace/eslint-devkit@1.19.2

npm install --save-dev eslint-plugin-secure-coding@5.3.2

• —Fixobj['deprecatedProp'] reads the same deprecated export
• —Dependenciesupdated workspace dependencies: @interlace/eslint-devkit@1.19.2

npm install --save-dev eslint-plugin-import-next@2.7.3

• —Fixmd5(user['password']) weighs the same evidence
• —Dependenciesupdated workspace dependencies: @interlace/eslint-devkit@1.19.2

npm install --save-dev eslint-plugin-node-security@5.4.2

• —FixcreateRawIdentifierRule reads a subscripted tag and callee

npm install --save-dev @interlace/eslint-devkit@1.19.2

• —Fixres['send'](err['stack']) leaks the same trace
• —Dependenciesupdated workspace dependencies: @interlace/eslint-devkit@1.19.2

npm install --save-dev eslint-plugin-express-security@3.2.3

• —Fixerror['stack'] exposes the same trace as error.stack
• —Dependenciesupdated workspace dependencies: @interlace/eslint-devkit@1.19.2

npm install --save-dev eslint-plugin-lambda-security@2.1.3

• —Fixno-missing-client-release and prefer-pool-query now expose their CWE at meta.docs.cwe, so every formatter renders it.
• —Dependenciesupdated workspace dependencies: @interlace/eslint-devkit@1.19.2

npm install --save-dev eslint-plugin-postgresql-security@2.3.4

• —Fixthree rules read a subscripted member the same as its dotted twin
• —Dependenciesupdated workspace dependencies: @interlace/eslint-devkit@1.19.2

npm install --save-dev eslint-plugin-browser-security@2.1.4

• —Fixexport default class extends Component is still a component
• —Fixclass A extends React['Component'] is the same base class
• —Fixmisspelled members and PropTypes validators read through a string subscript
• —Dependenciesupdated workspace dependencies: @interlace/eslint-devkit@1.19.2

npm install --save-dev eslint-plugin-react-features@1.7.2

• —Fixno-http-urls still reads a quasi with an uncookable escape
• —Dependenciesupdated workspace dependencies: @interlace/eslint-devkit@1.19.1

npm install --save-dev eslint-plugin-browser-security@2.1.3

• —Fixno-arbitrary-token-class scans a tagged className again
• —Dependenciesupdated workspace dependencies: @interlace/eslint-devkit@1.19.1

npm install --save-dev eslint-plugin-react-features@1.7.1

• —Fixa null cooked quasi no longer erases a credential URL

npm install --save-dev @interlace/eslint-devkit@1.19.1

• —Docsdetect-non-literal-fs-filename records why its own safePattern looks like a false positive
• —Fixrequire-dependency-integrity renders a tagged template whole
• —Dependenciesupdated workspace dependencies: @interlace/eslint-devkit@1.19.1

npm install --save-dev eslint-plugin-node-security@5.4.1

• —FixString.raw statements survive the parser bump
• —Dependenciesupdated workspace dependencies: @interlace/eslint-devkit@1.19.1

npm install --save-dev eslint-plugin-postgresql-security@2.3.3

• —Fixutm-taxonomy reads tagged quasis again
• —Dependenciesupdated workspace dependencies: @interlace/eslint-devkit@1.19.1

npm install --save-dev eslint-plugin-conventions@5.3.1

• —Fixno-hardcoded-credentials stops reporting error codes and build-tool paths
• —Fixtemplate text reads assert instead of concatenating null
• —Dependenciesupdated workspace dependencies: @interlace/eslint-devkit@1.19.1

npm install --save-dev eslint-plugin-secure-coding@5.3.1

• —Accessibility rules cite WCAG, not CWE. #610
• —identical-functions stops reporting on code nobody edits. #609
• —no-magic-numbers stops reading machine-packed output. #640
• —corpus-scan can install its targets, and no-extraneous-dependencies was #633
• —corpus-scan --local now actually measures the local working tree. #612
• —no-cycle cites CWE-1047, and CWE-407 gets its real name back. #611

npm install --save-dev @interlace/eslint-devkit@1.17.0

• —Fixdb['query'](…) is the same injection sink as db.query(…)
• —Dependenciesupdated workspace dependencies: @interlace/eslint-devkit@1.19.0

npm install --save-dev eslint-plugin-typeorm-security@0.3.7