@RetireJS

Free open source scanner for detecting use of JavaScript libraries with known vulnerabilities

 JavaScript
github.com/RetireJS/retire.js
Joined February 2014
  • Tweets71
  • Following25
  • Followers528
4Media
Finally! Prime Time for the Salesforce Code Analyser This security checker wraps and harmonizes proven Open-Source like @pmd_analyzer, @geteslint, and @RetireJS. To bring them on par with commercial offerings Salesforce added a flexible Data Flow engine. developer.salesforce.com/blo…
5
10
2
32
Our name got a new meaning: devclass.com/2022/08/04/reti…

'The best thing we can do today to JavaScript is to retire it,' says JSON creator Douglas Crockford

Best thing we can do to JavaScript is retire it: JSON creator Douglas Crockford

devclass.com
1
2
What severity should we put on a library being End-of-Life? Low? Medium? github.com/RetireJS/retire.j…

Add AngularJS EoL? · Issue #385 · RetireJS/retire.js

Retire.js version: (retire --version): N/A current jsrepository node version: (node --version): N/A Type: Question Description: AngularJS is end of life, per: https://docs.angularjs.org/misc/versio...

github.com
1
5
4
The nodejs scanner part of retire.js is now deprecated. Will try to keep the frontend javascript scanner working, but with npm audit having so much higher quality, deprecating the node bit seems like the most responsible choice: github.com/RetireJS/retire.j…
2
8
npm 6 is pretty awesome! This is output from npm install
1
12
19
npm 6 will have built-in dependency auditing! This is great! It also means we will most likely deprecate the node.js scanning capability of retire.js and focus on client side libraries only. github.com/npm/npm/releases/…

Release v6.0.0-next.2 · npm/npm

This release became 6.0.0

github.com
1
6
9
Someone made a python command line scanner of retire.js. Scan a site from the CLI: github.com/FallibleInc/retir…

GitHub - FallibleInc/retirejslib: Scan for vulnerabilities in JavaScript libraries you use (Python...

Scan for vulnerabilities in JavaScript libraries you use (Python port of retirejs) - FallibleInc/retirejslib

github.com
1
7
14
Retire.js made the front page news today here in Norway. Lots of govt web sites using vulnerable #js libs: nrk.no/dokumentar/offentlige…

Offentlige nettsteder kan brukes til å svindle eller angripe deg

Utdatert og sårbar kode på offentlige nettsteder gjør at ondsinnede aktører i verste fall kan svindle og lure deg med nettadresser du stoler på. Blir du lurt med en adresse fra det offentlige kan de...

nrk.no
7
8
Hey #JavaScript developers. Using moment.js? We've plugged a potential security hole. Please update to 2.11.2. Thanks! – at Redmond, WA
2
48
32
"Top15 security predictions 2016 Ghosts of Internet Past ...old and broken JS versions that invite compromise..." infoworld.com/article/301595…
2
"Securing Your Node.js App" #javascript #nodejs stackabuse.com/securing-your…
3
8
Exciting stuff from @LiftSecurity : blog.liftsecurity.io/2015/10…
1
Current record from a scan: 6 different versions of jQuery loaded on the same page
1
Go check your site for vulnerable JS libs here: retire.insecurity.today/ #siksym15
16
14
Thanks to @Jhaddix for mentioning Retire.js in his talk at HouSecCon 6: youtube.com/watch?v=ebqbmPR1…
Retire.js ile Javascript Kütüphanelerinizin Güvenliğini Kontrol Edin devnot.com/2015/retire-js-il…
1
1
Could really use help in going through release notes of these WYSIWYG editors to look for vulnerabilities: github.com/RetireJS/retire.j… #js
Not using @RetireJS? You should be blog.liftsecurity.io/2014/11… #javascript #nodejs #besafe
4
2
Well played @TeslaMotors well played.
4
19
21
retire.js retweeted
Node.js
@nodejs4 Jul 2015
Important security release for Node.js v0.12 will be available shortly, please upgrade. v0.10.x is not impacted. Sorry for the short notice.
3
280
128
Load more