Articles
Engineering writing on static analysis, ESLint, security, and AI-native developer tooling.
Filtered by tag #benchmark · clear filter
- Feb 8, 2026Microsoft's ESLint Security Plugin Catches 10% of Vulnerabilities. Here's What It Misses.A head-to-head benchmark between @microsoft/eslint-plugin-sdl and the Interlace security ecosystem. Microsoft's SDL standard covers 1 of 14 security categories.#security#eslint#javascript+11010 min0
- Feb 8, 2026SonarJS Has 269 Rules. It Still Misses 65% of Security Vulnerabilities.A head-to-head benchmark between eslint-plugin-sonarjs and the Interlace security ecosystem. 269 rules vs 201 rules — more isn't better when 65% of vulnerabilities slip through.#security#eslint#javascript+10012 min0
Jan 2, 2026Engineering the 100x Speedup: A Static Analysis Performance ReportA data-driven report on optimizing static analysis at scale. How we engineered a 100x speedup in the industry's most used linter plugin.#eslint#javascript#performance+1004 min0- Microsoft's ESLint Security Plugin Catches 10% of Vulnerabilities. Here's What It Misses.A head-to-head benchmark between @microsoft/eslint-plugin-sdl and the Interlace security ecosystem. Microsoft's SDL standard covers 1 of 14 security categories.#security#eslint#javascript+110 min
- SonarJS Has 269 Rules. It Still Misses 65% of Security Vulnerabilities.A head-to-head benchmark between eslint-plugin-sonarjs and the Interlace security ecosystem. 269 rules vs 201 rules — more isn't better when 65% of vulnerabilities slip through.#security#eslint#javascript+112 min
