JavaScript Security Tooling

JavaScript-Security-Tooling.md

standards

• Functional Programming ( Pure Functions, Avoid Side Effects )
• eslint: standardjs

Static Code Analysis

bugs prevention

• https://github.com/facebook/flow/

security vulnerability scans

• https://nodesecurity.io/
• https://github.com/nodesecurity/eslint-plugin-security
• https://github.com/RetireJS/retire.js
• https://github.com/jeremylong/DependencyCheck
• https://github.com/mozfreddyb/eslint-config-scanjs
• https://github.com/pmd/pmd

if you use react native, consider

• https://github.com/MobSF/Mobile-Security-Framework-MobSF

Dynamic analysis

guidelines

• OWASP