eslint-plugin-anti-trojan-source vs HackerOne Code (2026)