eslint-plugin-jsx-a11y vs Naabu

eslint-plugin-jsx-a11y is a free MIT-licensed package that uses ESLint to statically inspect JSX for accessibility issues in React applications. Its rules cover alternative text, ARIA properties, values, roles and requirements, labels, keyboard access, and captions for audio and video. It can flag clickable non-interactive elements without keyboard listeners and interactive handlers on elements that are not focusable. Recommended and strict configurations are documented for legacy .eslintrc files and flat eslint.config.js files. Configuration can map custom component names to DOM element types and DOM attributes to JSX properties, allowing those abstractions to be checked. An optional polymorphicPropName setting is supported, although the project warns that polymorphic components can be harder to maintain. Installation instructions cover npm and Yarn and require ESLint. The plugin analyzes static code rather than rendered DOM. Its maintainers recommend pairing it with @axe-core/react and assistive-technology testing. It has no manual review tools, mobile testing, browser extension, or remediation guidance. The repository links to Tidelift for professional support.

Naabu is a free, open-source command-line port scanner for identifying valid ports on hosts, with SYN, CONNECT, and UDP probes. It accepts hosts, IP addresses, CIDR ranges, and ASNs directly, from a file, or through standard input. Results can be emitted as JSON, CSV, text, or standard output. It supports IPv4 and experimental IPv6 scanning, DNS port scans, passive enumeration through Shodan InternetDB, and experimental host discovery. Naabu can work with Nmap for service discovery and version detection, and discovered ports can be piped to ProjectDiscovery's httpx to identify running HTTP servers. The CLI can upload or display scan results in the ProjectDiscovery Cloud dashboard. Installation options include ready-to-run binaries, Docker, and Go. Packet capture requires libpcap on Linux or macOS, or Npcap on Windows. Service version detection needs a local Nmap service-probe database or a custom path. The README recommends running as root for best results and adjusting scan flags and rate on local systems.