extends:
  - recommended
rules:
  security-defined: warn