Plugin: sequelize
Changelog
Release history and version updates for eslint-plugin-sequelize-security
Generated from the release history
Built from this package's CHANGELOG.md at deploy time, so it matches the
version these docs describe. The full cross-package history lives on the
changelog.
0.3.9
- FixThe README logo now links to the plugin's own documentation.
0.3.8
- Fix
db['query'](…)is the same injection sink asdb.query(…) - Dependenciesupdated workspace dependencies:
@interlace/eslint-devkit@1.19.0
0.3.7
- FixAdd an install-size badge to the README prelude, linking to each package's packagephobia page. npm renders the README from the last publish, so a badge only appears on npmjs.com after a release.
- Dependenciesupdated workspace dependencies:
@interlace/eslint-devkit@1.18.2
0.3.6
- FixStop pointing readers at retired package names.
secure-coding's "extend your coverage" block linkedeslint-plugin-jwtandsequelize-security's prose namedeslint-plugin-pg— both deprecated on npm since #414, and following either installs the frozen pre-rename build rather than the maintained one.
0.3.5
- FixRefresh the README npm serves for these plugins. npm renders the README from the last publish, so all seven still advertise
eslint-plugin-pgandeslint-plugin-jwt— names retired in #414 and since deprecated on npm. A reader who followed one installed the frozen pre-rename package instead of the maintained one. The repo has been correct since the rename; only a publish moves what npmjs.com shows. - Dependenciesupdated workspace dependencies:
@interlace/eslint-devkit@1.18.1
0.3.4
- Fixpoint
meta.docs.urlat documentation that exists #683 - Dependenciesupdated workspace dependencies:
@interlace/eslint-devkit@1.17.2
0.3.3
- Each SQL plugin now reports only in files that import its own driver #478
- DependenciesUpdated internal dependencies
0.3.2
0.3.1
- Ship the JavaScript without tsc's layout. #411
- DependenciesUpdated internal dependencies
0.3.0
0.2.0
- Add
require-tls(CWE-319) to the Knex, mysql2, Sequelize and TypeORM security plugins. #373 - Load rule modules on demand instead of at plugin load. #381
- Declare what we support, load only what we use #381
- Fix the
./oxlintsubpath export, which pointed atsrc/oxlint.js— a file no build produces.require('<package>/oxlint')threw MODULE_NOT_FOUND on every published package, while every README documented that exact wiring for oxlint'sjsPlugins. The export now points at the build output,dist/src/oxlint.js. #335 - DependenciesUpdated internal dependencies
0.1.2
- Add the ecosystem and oxlint marks to the README logo row. Each plugin now #364
0.1.0
- Sinks:
sequelize.query()andSequelize.literal()— the latter is - Remediation: Sequelize's own conventions (
replacements,bind), - Taint tracking: queries assembled across statements, including
+=.
0.1.1
- Re-publish every package so npm carries the optimised artifact #338
- DependenciesUpdated internal dependencies
View on GitHub →
Building secure JavaScript with Interlace? Star the repo to get new rules and CWE coverage as we ship them — or follow the AI-code-security benchmarks behind them.