Interlace ESLint
ESLint Interlace
NestJS

Overview

NestJS security rules for guards, validation, and throttler

eslint-plugin-nestjs-security

npm version npm downloads License: MIT codecov

5 specialized rules — LLM-optimized error messages with CWE, OWASP, and CVSS metadata.

Installation

npm install --save-dev eslint-plugin-nestjs-security

Configuration

import nestjssecurity from 'eslint-plugin-nestjs-security';

export default [nestjssecurity.configs.recommended];

Available Presets

PresetDescription
recommendedBalanced security for most projects
strictMaximum enforcement (all rules as errors)

Rules

Browse all rules with CWE and OWASP references:

Loading rules...

Initializing articles...

Changelog

Release history for eslint-plugin-express-security

no-exposed-private-fields

This rule detects sensitive fields (like passwords, tokens, secrets) in entity or DTO classes that are not excluded from serialization, which can lead to accide

On this page

eslint-plugin-nestjs-securityInstallationConfigurationAvailable PresetsRulesRelated Articles