Free open source scanner for detecting use of JavaScript libraries with known vulnerabilities
Joined February 2014
- Tweets 71
- Following 25
- Followers 530
- Likes 15
4 Photos and videos
retire.js retweeted
14 Oct 2022
Finally! Prime Time for the Salesforce Code Analyser This security checker wraps and harmonizes proven Open-Source like @pmd_analyzer, @geteslint, and @RetireJS. To bring them on par with commercial offerings Salesforce added a flexible Data Flow engine. developer.salesforce.com/blo…
5
10
32
What severity should we put on a library being End-of-Life? Low? Medium?
github.com/RetireJS/retire.j…
1
5
4
retire.js retweeted
21 May 2021
The nodejs scanner part of retire.js is now deprecated. Will try to keep the frontend javascript scanner working, but with npm audit having so much higher quality, deprecating the node bit seems like the most responsible choice: github.com/RetireJS/retire.j…
2
8
npm 6 will have built-in dependency auditing! This is great! It also means we will most likely deprecate the node.js scanning capability of retire.js and focus on client side libraries only.
github.com/npm/npm/releases/…
1
6
9
Someone made a python command line scanner of retire.js. Scan a site from the CLI: github.com/FallibleInc/retir…
1
7
14
retire.js retweeted
12 May 2016
Retire.js made the front page news today here in Norway. Lots of govt web sites using vulnerable #js libs: nrk.no/dokumentar/offentlige…
7
8
retire.js retweeted
3 Feb 2016
Hey #JavaScript developers. Using moment.js? We've plugged a potential security hole. Please update to 2.11.2. Thanks!
2
48
32
"Top15 security predictions 2016
Ghosts of Internet Past
...old and broken JS versions that invite compromise..." infoworld.com/article/301595…
2
retire.js retweeted
26 Nov 2015
3
8
retire.js retweeted
28 Oct 2015
Go check your site for vulnerable JS libs here: retire.insecurity.today/ #siksym15
16
14
Thanks to @Jhaddix for mentioning Retire.js in his talk at HouSecCon 6: youtube.com/watch?v=ebqbmPR1…
retire.js retweeted
29 Sep 2015
Retire.js ile Javascript Kütüphanelerinizin Güvenliğini Kontrol Edin devnot.com/2015/retire-js-il…
1
1
Could really use help in going through release notes of these WYSIWYG editors to look for vulnerabilities: github.com/RetireJS/retire.j… #js
retire.js retweeted
18 Sep 2015
4
2
retire.js retweeted
7 Aug 2015
Well played @TeslaMotors well played.
4
19
21
