DryRun Security AppSec Agents vs eslint-plugin-anti-trojan-source (2026)