Benchmarks
Performance comparisons and feature matrix
Ecosystem at a Glance
ESLint Interlace is the most comprehensive security linting ecosystem for JavaScript:
| Metric | Value |
|---|---|
| Total Security Rules | 330+ |
| ESLint Plugins | 18+ |
| OWASP Top 10 Coverage | 100% |
| Average Test Coverage | 85%+ |
Live Stats
These numbers are automatically updated from our plugin statistics JSON, which is refreshed daily by GitHub Actions. View live coverage.
Rule Coverage Comparison
How does Interlace compare to other ESLint security plugins?
| Plugin | Rules | AI Metadata | OWASP Mapping |
|---|---|---|---|
| ESLint Interlace | 330+ | ✓ Full | ✓ 100% |
eslint-plugin-security | 17 | ✗ | Partial |
eslint-plugin-sonarjs | 32 | ✗ | Partial |
eslint-plugin-import | 60 | ✗ | ✗ |
eslint-plugin-n | 29 | ✗ | ✗ |
19x More Rules
Interlace provides nearly 20x more security rules than the next largest alternative, with full AI-native metadata on every rule.
Performance Benchmarks
Interlace is optimized for speed, even with comprehensive security checks:
Cycle Detection (import-next)
Measured on a real React 19 + Vite + TypeScript codebase — 5,736 files (4,682 excluding tests and stories), 455K LoC — with import/no-cycle enabled on both sides:
| Tool | End-to-end lint | Rule time only | Comparison |
|---|---|---|---|
eslint-plugin-import 2.32.0 | 51.7s | 39.2s | Baseline |
| eslint-plugin-import-next | 16.7s | 4.9s | 3.1x / 8x faster |
Source: ilb-perf-import-no-cycle
2026-05-03.
Detection parity with the official plugin is 100%; peak RSS is 4,064 MB vs
4,035 MB for the official plugin (+29 MB). Every figure on this page is registered in
CLAIMS.md.
Rule Processing
| Tool | Time | Comparison |
|---|---|---|
| Alternative | 2.1s | Baseline |
| ESLint Interlace | 0.25s | 8.4x faster |
Feature Matrix
Detailed capability comparison with popular alternatives:
| Feature | Interlace | eslint-plugin-security | eslint-plugin-sonarjs |
|---|---|---|---|
| LLM-Optimized Messages | ✓ | ✗ | ✗ |
| CWE Mapping | ✓ Full | ✗ | Partial |
| OWASP Top 10 Coverage | 100% | ~40% | ~25% |
| CVSS Scoring | ✓ | ✗ | ✗ |
| Compliance Tags | ✓ | ✗ | ✗ |
| Auto-fix Available | ✓ | Partial | ✓ |
| TypeScript Support | ✓ | ✓ | ✓ |
| React/Next.js Rules | ✓ | ✗ | ✗ |
| Database Security | ✓ | ✗ | ✗ |
| AI SDK Security | ✓ | ✗ | ✗ |
Unique Capabilities
Features you won't find anywhere else:
🤖 LLM-Optimized Messages
Every error includes structured metadata for AI assistants to auto-fix issues accurately.
🔒 PostgreSQL COPY FROM
Detects file read vulnerabilities via COPY FROM—first ESLint rule of its kind.
⚡ 8x Faster no-cycle
Cycle detection rule time cut from 39.2s to 4.9s on a 455K-LoC codebase, with 100% detection parity.
🛡️ JWT Algorithm Confusion
Catches CVE-2015-2951 algorithm confusion attacks in your JWT implementation.
🧠 AI Tool Misuse Detection
Prevents prompt injection and tool result manipulation in AI SDK usage.
📊 NoSQL Query Injection
Detects $where, $regex, and aggregation injection patterns in MongoDB.
Plugin Comparison Dimensions
We compare plugins across 5 key dimensions:
| Dimension | Interlace | Industry Average |
|---|---|---|
| Security Depth | 100% | 35% |
| Performance | 95% | 40% |
| Type Safety | 100% | 55% |
| Auto-fix | 90% | 30% |
| Developer Experience | 98% | 60% |
Methodology
Scores are based on: rule count, execution speed, TypeScript support, fix availability, and documentation quality. Industry averages are from popular ESLint security plugins.
Why Interlace Wins
Comprehensive Coverage
330+ rules covering web, server, mobile, database, and AI SDK security across 18+ plugins.
AI-Native Design
Every rule outputs structured metadata that AI assistants can parse and act on.
Performance Optimized
Algorithms designed for speed—8x faster cycle detection, parallel rule execution.
Production Tested
85%+ test coverage with live Codecov metrics. Trusted in production environments.
Next Steps
Building secure JavaScript with Interlace? Star the repo to get new rules and CWE coverage as we ship them — or follow the AI-code-security benchmarks behind them.