Detector: ESLint Runner

Detector: ESLint Runner

Wraps Biome or ESLint for JavaScript/TypeScript linting.

Property	Value
Name	eslint-runner
Tier	DETERMINISTIC
Languages	JavaScript, TypeScript
External tool	Biome (preferred) or ESLint (fallback)
LLM required	No
Confidence	1.00

What it detects

JS/TS lint violations — style issues, suspicious patterns, security concerns, and code correctness problems.

How it works

1. Checks for JS/TS files (via package.json or file extensions)
2. Tries Biome first (biome lint --reporter=json) — modern, fast
3. Falls back to ESLint (eslint --format=json) if Biome is not available
4. Maps linter severities to Sentinel levels
5. Elevates dangerous rules to HIGH severity

High-severity rules

The following rules are automatically elevated to HIGH:

• no-eval, no-implied-eval
• no-new-func
• Security-related Biome categories (suspicious, security)

Example finding

[ESLINT] src/components/Form.tsx:45 — no-eval
  eval can be harmful
  Severity: HIGH, Confidence: 1.00

Prerequisites

Install one of:

# Biome (recommended — faster)
npm install -g @biomejs/biome

# Or ESLint
npm install -g eslint

Known limitations

• Requires Biome or ESLint to be installed globally or in the project
• Most useful for repos without existing CI lint checks
• 120-second timeout