Add eslint-plugin-security

.eslintrc.js

@@ -12,7 +12,7 @@ module.exports = {
     node: false,
     'node-globals/env': true
   },
-  plugins: ['ava', 'import', 'node-globals', 'react', 'unicorn'],
+  plugins: ['ava', 'import', 'node-globals', 'react', 'security', 'unicorn'],
   rules: {
     'array-bracket-spacing': ['error', 'never'],
     'arrow-parens': ['error', 'as-needed'],
@@ -81,6 +81,10 @@ module.exports = {
     'react/no-will-update-set-state': 'error',
     'react/require-render-return': 'error',
     'react/void-dom-elements-no-children': 'error',
+    'security/detect-buffer-noassert': 'error',
+    'security/detect-child-process': 'error',
+    'security/detect-eval-with-expression': 'error',
+    'security/detect-unsafe-regex': 'error',
     'standard/array-bracket-even-spacing': 'off',
     'standard/computed-property-even-spacing': 'off',
     'standard/object-curly-even-spacing': 'off',

README.md

@@ -10,6 +10,8 @@ configuration:
 tests](https://github.com/sindresorhus/eslint-plugin-ava)
 * Rules that [enforce how dependencies are
 imported](https://github.com/benmosher/eslint-plugin-import)
+* Rules to avoid [potential security
+issues](https://github.com/nodesecurity/eslint-plugin-security)
 * Rules for [promises](https://github.com/xjamundx/eslint-plugin-promise)
 * Rules for [JSX / React](https://github.com/yannickcr/eslint-plugin-react)
 * Various [awesome](https://github.com/sindresorhus/eslint-plugin-unicorn)

package.json

@@ -41,6 +41,7 @@
     "eslint-plugin-node-globals": "0.1.0",
     "eslint-plugin-promise": "3.6.0",
     "eslint-plugin-react": "7.4.0",
+    "eslint-plugin-security": "1.4.0",
     "eslint-plugin-standard": "3.0.1",
     "eslint-plugin-unicorn": "github:sindresorhus/eslint-plugin-unicorn#cba8dd9f31f2ff5646376b137a85f95ab2567e98",
     "has-flag": "^2.0.0",