Retire.js
Scans websites and JavaScript projects for libraries with known security vulnerabilities.
By The Retire.js contributors
View the Retire.js source code
Alternatives
About Retire.js
Retire.js checks web apps and Node.js projects for JavaScript libraries and modules with known vulnerabilities. Its command-line scanner can inspect projects, while browser extensions scan visited sites and report vulnerable libraries.
It also has plugins for Burp Suite and ZAP. Retire.js suits developers and security testers checking dependencies or web pages for outdated vulnerable components.
Strengths
- Scans web apps and Node.js projects
- Browser extensions report vulnerable libraries on visited sites
- Available as plugins for Burp Suite and ZAP
Limitations
- Detects only vulnerabilities in its listed JavaScript libraries
Details
- Pricing
- FreeFree software under the Apache-2.0 license.
- License
- Apache-2.0
- Developer
- The Retire.js contributors
- Platforms
- Browser extension, Command line
- How it runs
- Downloadable app, Browser extension
- Best suited for
- Developers and security testers checking sites or projects for vulnerable JavaScript libraries
- Categories
- Browser tools, Security tools
- Last verified
- Added
- Provenance
- Selected from the Homebrew formula
- Sources