eslint-plugin-anti-trojan-source vs SOOS SAST (2026)