Is @microsoft/eslint-plugin-sdl safe to use?

@microsoft/eslint-plugin-sdl has no known vulnerabilities on the latest version (1.1.0). DepScope rates its health at 60/100 (moderate risk).

What is the latest version of @microsoft/eslint-plugin-sdl?

The latest version of @microsoft/eslint-plugin-sdl is 1.1.0, released 2025-02-18.

Does @microsoft/eslint-plugin-sdl have known vulnerabilities?

No known vulnerabilities on the latest version of @microsoft/eslint-plugin-sdl.

Is @microsoft/eslint-plugin-sdl deprecated?

No, @microsoft/eslint-plugin-sdl is actively maintained. Latest release: 1.1.0 (2025-02-18).

What are alternatives to @microsoft/eslint-plugin-sdl?

Popular alternatives to @microsoft/eslint-plugin-sdl in npm include: ?, semver, debug, minimatch.

What license does @microsoft/eslint-plugin-sdl use?

@microsoft/eslint-plugin-sdl is licensed under MIT.

@microsoft/eslint-plugin-sdl

npmv1.1.0

ESLint plugin focused on common security issues and misconfigurations discoverable during static testing as part of Microsoft Security Development Lifecycle (SDL)

License MITpermissive19 versions6 maintainers3 deps1,678,731 weekly dl

microsoft/eslint-plugin-sdl

/ 100

Health

use with caution

@microsoft/[email protected] low health (60/100) — consider alternatives

Moderate health score (60/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

17/20

popularity

25/25

security

12/15

maturity

6/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (3)

eslint-plugin-n eslint-plugin-react eslint-plugin-security

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@microsoft/eslint-plugin-sdl