Hidden Hacks in Linters for Better & More Secure Code

Linters are a great tool that enable developers to create static analysis rules for their code base. While most coders use pre-built sets of rules baked into their linter of choice, these can also be adapted to custom needs.

Today's linters are highly evolved and make it possible to avoid static code and even to run SA checks through the development and CI cycles, but they are even more powerful and few developers take advantage of their many advanced features. With ESLint it is quite easy to create custom rules that can for both general usage––such as duck typing, code styling, or type checks, through more customized usage like maintaining clarity around internals, and enforcing org guidelines.

With custom rules, you can proactively help your developers write better in their native IDEs, create much more stable apps, and have security tools leverage them for manual vulnerability checks. This talk will demonstrate how you can apply all of this to your JS with ESLint.