javascript-security

This ruleset will help identify potential security hotspots, but finds a lot of false positives which need triage by a human.