The False Positive Tax: a 1:1 TP:FP analysis of eslint-plugin-security

eslint-plugin-security flags one safe pattern for every real vulnerability it catches. Five other security plugins benchmarked side-by-side, with the false-positive code samples that drive alert fatigue.