Is @rushstack/eslint-plugin-security safe to use?

@rushstack/eslint-plugin-security has no known vulnerabilities on the latest version (0.14.2). DepScope rates its health at 75/100 (moderate risk).

What is the latest version of @rushstack/eslint-plugin-security?

The latest version of @rushstack/eslint-plugin-security is 0.14.2, released 2026-02-25.

Does @rushstack/eslint-plugin-security have known vulnerabilities?

No known vulnerabilities on the latest version of @rushstack/eslint-plugin-security.

Is @rushstack/eslint-plugin-security deprecated?

No, @rushstack/eslint-plugin-security is actively maintained. Latest release: 0.14.2 (2026-02-25).

What are alternatives to @rushstack/eslint-plugin-security?

Popular alternatives to @rushstack/eslint-plugin-security in npm include: ?, semver, minimatch, debug, ansi-styles.

What license does @rushstack/eslint-plugin-security use?

@rushstack/eslint-plugin-security is licensed under MIT.

@rushstack/eslint-plugin-security

npmv0.14.2

An ESLint plugin providing rules that identify common security vulnerabilities for browser applications, Node.js tools, and Node.js services

License MITpermissive32 versions4 maintainers2 deps129,945 weekly dl

microsoft/rushstack

/ 100

Health

safe to use

@rushstack/[email protected] is safe to use (health: 75/100)

Health breakdown0 – 100

15/25

maintenance

14/20

popularity

25/25

security

12/15

maturity

9/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (2)

@rushstack/tree-pattern @typescript-eslint/utils

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@rushstack/eslint-plugin-security