Plugin: prisma-security
Changelog
Release history and version updates for eslint-plugin-prisma-security
Generated from the release history
Built from this package's CHANGELOG.md at deploy time, so it matches the
version these docs describe. The full cross-package history lives on the
changelog.
0.3.8
- FixThe README logo now links to the plugin's own documentation.
0.3.7
- Fix
db['query'](…)is the same injection sink asdb.query(…) - Dependenciesupdated workspace dependencies:
@interlace/eslint-devkit@1.19.0
0.3.6
- FixAdd an install-size badge to the README prelude, linking to each package's packagephobia page. npm renders the README from the last publish, so a badge only appears on npmjs.com after a release.
- Dependenciesupdated workspace dependencies:
@interlace/eslint-devkit@1.18.2
0.3.5
- FixRefresh the README npm serves for these plugins. npm renders the README from the last publish, so all seven still advertise
eslint-plugin-pgandeslint-plugin-jwt— names retired in #414 and since deprecated on npm. A reader who followed one installed the frozen pre-rename package instead of the maintained one. The repo has been correct since the rename; only a publish moves what npmjs.com shows. - Dependenciesupdated workspace dependencies:
@interlace/eslint-devkit@1.18.1
0.3.4
- Fixpoint
meta.docs.urlat documentation that exists #683 - Dependenciesupdated workspace dependencies:
@interlace/eslint-devkit@1.17.2
0.3.3
- Each SQL plugin now reports only in files that import its own driver #478
- DependenciesUpdated internal dependencies
0.3.2
0.3.1
- Ship the JavaScript without tsc's layout. #411
- DependenciesUpdated internal dependencies
0.3.0
0.2.2
- Load rule modules on demand instead of at plugin load. #381
- Declare what we support, load only what we use #381
- Fix the
./oxlintsubpath export, which pointed atsrc/oxlint.js— a file no build produces.require('<package>/oxlint')threw MODULE_NOT_FOUND on every published package, while every README documented that exact wiring for oxlint'sjsPlugins. The export now points at the build output,dist/src/oxlint.js. #335 - DependenciesUpdated internal dependencies
0.2.1
- Add the ecosystem and oxlint marks to the README logo row. Each plugin now #364
0.1.0
- mysql2 / mysql. Sinks:
.query(),.execute()(gated on SQL keywords in the static text, since these are common method names outside MySQL). Remediation names MySQL's own safe API. - @prisma/client. Sinks:
.$queryRawUnsafe(),.$executeRawUnsafe(). Remediation names Prisma's own safe API. - drizzle-orm. Sinks:
.raw(). Remediation names Drizzle's own safe API. - knex. Sinks:
.raw(). Remediation names Knex's own safe API. - better-sqlite3 / sqlite3. Sinks:
.prepare(),.exec(),.run(),.all(),.get()(gated on SQL keywords in the static text, since these are common method names outside SQLite). Remediation names SQLite's own safe API. - typeorm. Sinks:
.query(). Remediation names TypeORM's own safe API.
0.2.0
- Add
no-unscoped-mutation(CWE-284) to the Prisma, Drizzle and Knex plugins #353 - DependenciesUpdated internal dependencies
0.1.1
- Re-publish every package so npm carries the optimised artifact #338
- DependenciesUpdated internal dependencies
View on GitHub →
Building secure JavaScript with Interlace? Star the repo to get new rules and CWE coverage as we ship them — or follow the AI-code-security benchmarks behind them.