eslint-plugin-anti-trojan-source vs Gecko Security (2026)