eslint-plugin-anti-trojan-source vs Perforce Klocwork (2026)