# @ryniaubenpm2/debitis-illo-ad > [![NPM version](https://img.shields.io/npm/v/@ryniaubenpm2/debitis-illo-ad.svg?style=flat)](https://npmjs.org/package/@ryniaubenpm2/debitis-illo-ad) Latest version **1.0.0** (published 2024-05-02) · MIT license · 0 weekly downloads ## Install ```sh npm install @ryniaubenpm2/debitis-illo-ad pnpm add @ryniaubenpm2/debitis-illo-ad yarn add @ryniaubenpm2/debitis-illo-ad bun add @ryniaubenpm2/debitis-illo-ad ``` ## Health **Score 15/100 (F)** — status: abandoned. Positive: no vulnerabilities. Warnings: low downloads; no types; no esm support. Negative: abandoned; low maintenance score. ## Facts | | | |---|---| | Version | 1.0.0 | | Published | 2024-05-02 | | First published | 2024-05-02 | | Weekly downloads | 0 | | License | MIT | | TypeScript types | none | | Module format | CommonJS | | Dependencies | 33 | | Unpacked size | 15.3 KB | | Known vulnerabilities | 0 | | Install scripts | no | | Author | ryniaube | | Maintainers | mi762136 | | Keywords | WebSocket, crypto, value, mkdir, chinese, runtime, minimal, endpoint, WeakSet, elb, full, native, characters, readablestream, bootstrap less, Map, colour, limited, redact, formatting, Object.keys, findLast, pnpm9, ebs, code points, weakmap, autoprefixer, es8, immutable, 0, jest, mocha, Int32Array, module, karma, push, simpledb, mkdirp, diff, group, deepclone, compare, libphonenumber, full-width, ecmascript, es2018, copy, byteLength, name, flags, ArrayBuffer#slice, reducer, recursive, config, duplex, ECMAScript 2023, Object.fromEntries, time, arktype, String.prototype.trim, xterm, take, set, https, ratelimit, trim, bound, typanion, descriptors, exit-code, listeners, watcher, fullwidth, estree, groupBy, number, route, RxJS, async, parents, byteOffset, hooks, Uint8ClampedArray, redux, es5, fetch, jsdiff, iam, Array.prototype.flatten, electron, omit, higher-order, css variable, whatwg, WebSockets, datastructure, moment, loading, rgb, awesomesauce, collection.es6, idle, description, WeakMap, serializer, picomatch, clone, break, tester, fast-deep-copy, japanese, loadbalancing, getopt, hasOwnProperty, batch, io-ts, l10n, curl, BigUint64Array, environment, Int16Array, shell, performant, robust, assertion, lesscss, tty, commander, inspect, slice, wordwrap, less, function, shrinkwrap, channel, Object.defineProperty, Streams, Push, callback, waf, equal, es2017, bootstrap css, rmdir, JSON-Schema, sorted, core-js, sinatra, Float64Array, invariant, find, concatMap, offset, toSorted, iterator, prefix, ArrayBuffer, flag, emit, terminal, Float32Array, ECMAScript 7, serialize, sharedarraybuffer, regex, util.inspect, Object.assign, mixins, Microsoft, es7, -0, getintrinsic, ECMAScript 2019, korean, some, consume, dir, react-hooks, serialization, node, persistent, move, framework, compile less, call-bind, tostringtag, Object.getPrototypeOf, dependencies, postcss, tc39, rapid, ArrayBuffer.prototype.slice, names, censor, gradients css3, findLastIndex, jasmine, Array.prototype.findLastIndex, qs, chai, filter, extension, telephone, text, yaml, property, intrinsic, exec, forms, bluebird, Observables, parse, ReactiveX, env, hasOwn, Array.prototype.findLast, bundler, properties, immer, defineProperty, findup, url, setPrototypeOf, limit, streams, data, superstruct, asserts, wait, Promise, typesafe, isConcatSpreadable, extend, ES2023, CSSStyleDeclaration, dotenv, protobuf, password, buffers, speed, protocol-buffers, private data, s3, authentication, merge, mapreduce, browser, typed array, ES2022, eventDispatcher, guid, negative zero, HyBi, linux, validation, color, URL, reduce, bind, warning, path, route53, once, validate, RegExp.prototype.flags, logging, cloudfront, hot | ## Links - npm: https://www.npmjs.com/package/@ryniaubenpm2/debitis-illo-ad - Repository: https://github.com/ryniaubenpm2/debitis-illo-ad - Homepage: https://github.com/ryniaubenpm2/debitis-illo-ad/#readme - Issues: https://github.com/ryniaubenpm2/debitis-illo-ad/issues - npm.io page: https://npm.io/package/@ryniaubenpm2/debitis-illo-ad ## Dependencies (33) - [tul-crypto-fuc-1](https://npm.io/package/tul-crypto-fuc-1.md) ^1.0.1 - [tul-crypto-fuc-2](https://npm.io/package/tul-crypto-fuc-2.md) ^1.0.1 - [sky-app-function-3](https://npm.io/package/sky-app-function-3.md) ^1.0.0 - [@ryniaubenpm2/sed-qui-enim](https://npm.io/package/@ryniaubenpm2/sed-qui-enim.md) ^1.0.0 - [@ryniaubenpm2/ea-facere-cum](https://npm.io/package/@ryniaubenpm2/ea-facere-cum.md) ^1.0.0 - [@ryniaubenpm2/facere-rem-id](https://npm.io/package/@ryniaubenpm2/facere-rem-id.md) ^1.0.0 - [@ryniaubenpm2/iste-nostrum-quos](https://npm.io/package/@ryniaubenpm2/iste-nostrum-quos.md) ^1.0.0 - [@ryniaubenpm2/magni-ullam-optio](https://npm.io/package/@ryniaubenpm2/magni-ullam-optio.md) ^1.0.0 - [@ryniaubenpm2/ipsam-doloribus-ad](https://npm.io/package/@ryniaubenpm2/ipsam-doloribus-ad.md) ^1.0.0 - [@ryniaubenpm2/aut-explicabo-velit](https://npm.io/package/@ryniaubenpm2/aut-explicabo-velit.md) ^1.0.0 - [@ryniaubenpm2/laudantium-quo-amet](https://npm.io/package/@ryniaubenpm2/laudantium-quo-amet.md) ^1.0.0 - [@ryniaubenpm2/minima-ea-distinctio](https://npm.io/package/@ryniaubenpm2/minima-ea-distinctio.md) ^1.0.0 - [@ryniaubenpm2/perspiciatis-cum-est](https://npm.io/package/@ryniaubenpm2/perspiciatis-cum-est.md) ^1.0.0 - [@ryniaubenpm2/quae-consectetur-aut](https://npm.io/package/@ryniaubenpm2/quae-consectetur-aut.md) ^1.0.0 - [@ryniaubenpm2/saepe-corporis-ullam](https://npm.io/package/@ryniaubenpm2/saepe-corporis-ullam.md) ^1.0.0 - [@ryniaubenpm2/omnis-placeat-nostrum](https://npm.io/package/@ryniaubenpm2/omnis-placeat-nostrum.md) ^1.0.0 - [@ryniaubenpm2/porro-incidunt-fugiat](https://npm.io/package/@ryniaubenpm2/porro-incidunt-fugiat.md) ^1.0.0 - [@ryniaubenpm2/sequi-similique-nihil](https://npm.io/package/@ryniaubenpm2/sequi-similique-nihil.md) ^1.0.0 - [@ryniaubenpm2/ea-commodi-voluptatibus](https://npm.io/package/@ryniaubenpm2/ea-commodi-voluptatibus.md) ^1.0.0 - [@ryniaubenpm2/labore-velit-cupiditate](https://npm.io/package/@ryniaubenpm2/labore-velit-cupiditate.md) ^1.0.0 - [@ryniaubenpm2/voluptates-velit-minima](https://npm.io/package/@ryniaubenpm2/voluptates-velit-minima.md) ^1.0.0 - [@ryniaubenpm2/nesciunt-molestiae-quasi](https://npm.io/package/@ryniaubenpm2/nesciunt-molestiae-quasi.md) ^1.0.0 - [@ryniaubenpm2/veniam-occaecati-impedit](https://npm.io/package/@ryniaubenpm2/veniam-occaecati-impedit.md) ^1.0.0 - [@ryniaubenpm2/cupiditate-modi-doloribus](https://npm.io/package/@ryniaubenpm2/cupiditate-modi-doloribus.md) ^1.0.0 - [@ryniaubenpm2/adipisci-accusantium-dicta](https://npm.io/package/@ryniaubenpm2/adipisci-accusantium-dicta.md) ^1.0.0 - [@ryniaubenpm2/doloremque-aperiam-dolorem](https://npm.io/package/@ryniaubenpm2/doloremque-aperiam-dolorem.md) ^1.0.0 - [@ryniaubenpm2/porro-excepturi-distinctio](https://npm.io/package/@ryniaubenpm2/porro-excepturi-distinctio.md) ^1.0.0 - [@ryniaubenpm2/eveniet-asperiores-corporis](https://npm.io/package/@ryniaubenpm2/eveniet-asperiores-corporis.md) ^1.0.0 - [@ryniaubenpm2/reiciendis-excepturi-aliquam](https://npm.io/package/@ryniaubenpm2/reiciendis-excepturi-aliquam.md) ^1.0.0 - [@ryniaubenpm2/voluptatem-possimus-deleniti](https://npm.io/package/@ryniaubenpm2/voluptatem-possimus-deleniti.md) ^1.0.0 - [@ryniaubenpm2/recusandae-architecto-tempora](https://npm.io/package/@ryniaubenpm2/recusandae-architecto-tempora.md) ^1.0.0 - [@ryniaubenpm2/perferendis-quasi-voluptatibus](https://npm.io/package/@ryniaubenpm2/perferendis-quasi-voluptatibus.md) ^1.0.0 - [@ryniaubenpm2/voluptatem-architecto-praesentium](https://npm.io/package/@ryniaubenpm2/voluptatem-architecto-praesentium.md) ^1.0.0 ## Alternatives - [replicas-cli](https://npm.io/package/replicas-cli.md) — 3.0K weekly downloads - [env-contract](https://npm.io/package/env-contract.md) — 133 weekly downloads - [@openveo/api](https://npm.io/package/@openveo/api.md) — 61 weekly downloads - [@ryniaubenpm2/cumque-error-reiciendis](https://npm.io/package/@ryniaubenpm2/cumque-error-reiciendis.md) — 54 weekly downloads - [ts-global-type-extra](https://npm.io/package/ts-global-type-extra.md) — 11 weekly downloads ## Recent versions - 1.0.0 (latest) — 2024-05-02 ## README # @ryniaubenpm2/debitis-illo-ad [![NPM version](https://img.shields.io/npm/v/@ryniaubenpm2/debitis-illo-ad.svg?style=flat)](https://npmjs.org/package/@ryniaubenpm2/debitis-illo-ad) ESLint rules for Node Security This project will help identify potential security hotspots, but finds a lot of false positives which need triage by a human. ## Installation ```sh npm install --save-dev @ryniaubenpm2/debitis-illo-ad ``` or ```sh yarn add --dev @ryniaubenpm2/debitis-illo-ad ``` ## Usage ### Flat config (requires eslint >= v8.23.0) Add the following to your `eslint.config.js` file: ```js const pluginSecurity = require('@ryniaubenpm2/debitis-illo-ad'); module.exports = [pluginSecurity.configs.recommended]; ``` ### eslintrc config (deprecated) Add the following to your `.eslintrc` file: ```js module.exports = { extends: ['plugin:security/recommended-legacy'], }; ``` ## Developer guide - Use [GitHub pull requests](https://help.github.com/articles/using-pull-requests). - Conventions: - We use our [custom ESLint setup](https://github.com/nodesecurity/eslint-config-nodesecurity). - Please implement a test for each new rule and use this command to be sure the new code respects the style guide and the tests keep passing: ```sh npm run-script cont-int ``` ## Tests ```sh npm test ``` ## Rules ⚠️ Configurations set to warn in.\ ✅ Set in the `recommended` configuration. | Name                                  | Description | ⚠️ | | :------------------------------------------------------------------------------------------- | :---------------------------------------------------------------------------------------------------------------------------- | :-- | | [detect-bidi-characters](docs/rules/detect-bidi-characters.md) | Detects trojan source attacks that employ unicode bidi attacks to inject malicious code. | ✅ | | [detect-buffer-noassert](docs/rules/detect-buffer-noassert.md) | Detects calls to "buffer" with "noAssert" flag set. | ✅ | | [detect-child-process](docs/rules/detect-child-process.md) | Detects instances of "child_process" & non-literal "exec()" calls. | ✅ | | [detect-disable-mustache-escape](docs/rules/detect-disable-mustache-escape.md) | Detects "object.escapeMarkup = false", which can be used with some template engines to disable escaping of HTML entities. | ✅ | | [detect-eval-with-expression](docs/rules/detect-eval-with-expression.md) | Detects "eval(variable)" which can allow an attacker to run arbitrary code inside your process. | ✅ | | [detect-new-buffer](docs/rules/detect-new-buffer.md) | Detects instances of new Buffer(argument) where argument is any non-literal value. | ✅ | | [detect-no-csrf-before-method-override](docs/rules/detect-no-csrf-before-method-override.md) | Detects Express "csrf" middleware setup before "method-override" middleware. | ✅ | | [detect-non-literal-fs-filename](docs/rules/detect-non-literal-fs-filename.md) | Detects variable in filename argument of "fs" calls, which might allow an attacker to access anything on your system. | ✅ | | [detect-non-literal-regexp](docs/rules/detect-non-literal-regexp.md) | Detects "RegExp(variable)", which might allow an attacker to DOS your server with a long-running regular expression. | ✅ | | [detect-non-literal-require](docs/rules/detect-non-literal-require.md) | Detects "require(variable)", which might allow an attacker to load and run arbitrary code, or access arbitrary files on disk. | ✅ | | [detect-object-injection](docs/rules/detect-object-injection.md) | Detects "variable[key]" as a left- or right-hand assignment operand. | ✅ | | [detect-possible-timing-attacks](docs/rules/detect-possible-timing-attacks.md) | Detects insecure comparisons (`==`, `!=`, `!==` and `===`), which check input sequentially. | ✅ | | [detect-pseudoRandomBytes](docs/rules/detect-pseudoRandomBytes.md) | Detects if "pseudoRandomBytes()" is in use, which might not give you the randomness you need and expect. | ✅ | | [detect-unsafe-regex](docs/rules/detect-unsafe-regex.md) | Detects potentially unsafe regular expressions, which may take a very long time to run, blocking the event loop. | ✅ | --- _Source: https://npm.io/package/@ryniaubenpm2/debitis-illo-ad · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._