Oh, silly me. I totally forgot that the GitLab team reimplemented also a set of ESLint rules in Semgrep[0], just like I mentioned they did with Bandit. We publi

Oh, silly me. I totally forgot that the GitLab team reimplemented also a set of ESLint rules in Semgrep[0], just like I mentioned they did with Bandit. We published an in-depth comparison with ESLint[1] that might clear things up even more. [0]: https://semgrep.dev/p/gitlab-eslint https://semgrep.dev/p/gitlab-eslint [1]: https://r2c.dev/blog/2021/javascript-static-analysis-comparison-eslint-semgrep/ https://r2c.dev/blog/2021/javascript-static-analysis-compari...