Dev.to
7/16/2026

The SQL injection bug your code review keeps missing
Short summary
A developer built an ESLint plugin called eslint-plugin-typeorm-enterprise that automatically catches common TypeORM security pitfalls—SQL injection via string interpolation, unsafe QueryBuilder operations, missing transactions, and tenant-scoping gaps. The plugin ships with ten rules across four configs (recommended, strict, performance, multiTenant), works without type information, and supports both ESLint 9 and oxlint. It is available on npm and GitHub.
- •New ESLint plugin catches TypeORM SQL injection and other dangerous patterns automatically
- •Ten rules across recommended, strict, performance, and multiTenant configs
- •Works with ESLint 9 and oxlint; no type setup required; available on npm and GitHub
Generated with AI, which can make mistakes.
Is this a good recommendation for you?


