@RetireJS

Free open source scanner for detecting use of JavaScript libraries with known vulnerabilities

 JavaScript
github.com/RetireJS/retire.js
Joined February 2014
  • Tweets71
  • Following25
  • Followers528
4Media
Finally! Prime Time for the Salesforce Code Analyser This security checker wraps and harmonizes proven Open-Source like @pmd_analyzer, @geteslint, and @RetireJS. To bring them on par with commercial offerings Salesforce added a flexible Data Flow engine. developer.salesforce.com/blo…
5
10
2
32
The nodejs scanner part of retire.js is now deprecated. Will try to keep the frontend javascript scanner working, but with npm audit having so much higher quality, deprecating the node bit seems like the most responsible choice: github.com/RetireJS/retire.j…
2
8
Retire.js made the front page news today here in Norway. Lots of govt web sites using vulnerable #js libs: nrk.no/dokumentar/offentlige…

Offentlige nettsteder kan brukes til å svindle eller angripe deg

Utdatert og sårbar kode på offentlige nettsteder gjør at ondsinnede aktører i verste fall kan svindle og lure deg med nettadresser du stoler på. Blir du lurt med en adresse fra det offentlige kan de...

nrk.no
7
8
Hey #JavaScript developers. Using moment.js? We've plugged a potential security hole. Please update to 2.11.2. Thanks! – at Redmond, WA
2
48
32
"Securing Your Node.js App" #javascript #nodejs stackabuse.com/securing-your…
3
8
Go check your site for vulnerable JS libs here: retire.insecurity.today/ #siksym15
16
14
Retire.js ile Javascript Kütüphanelerinizin Güvenliğini Kontrol Edin devnot.com/2015/retire-js-il…
1
1
Not using @RetireJS? You should be blog.liftsecurity.io/2014/11… #javascript #nodejs #besafe
4
2
Well played @TeslaMotors well played.
4
19
21
retire.js retweeted
Node.js
@nodejs4 Jul 2015
Important security release for Node.js v0.12 will be available shortly, please upgrade. v0.10.x is not impacted. Sorry for the short notice.
3
280
128
Update to Node.js v0.10.39 (Maintenance) & v0.12.5 (Stable) which fix several CVEs related to OpenSSL blog.nodejs.org/2015/06/22/n…
14
7
Replying to @troyhunt
@troyhunt There is the already mentioned retirejs.github.io (for frontend) and also nodesecurity.io for NodeJS modules (backend).
4
5
I'm really surprized to find that bug 11290 from @jQuery still hasn't been fixed in jQuery.migrate. 1.2.1 is still the latest version.
1
retire.js - Your hackers will not like it: bit.ly/1GzpKvf After long break new post available! Enjoy!
3
2
If you have some free time let's give @webtonull & @RetireJS help checking some libraries. github.com/RetireJS/retire.j…
9
7
Could sure use some help going through release notes and issue trackers of some of these: github.com/RetireJS/retire.j… #retirejs #js
3
3
@davemethvin it would be very useful to have *all* jq plugins to require a static attr w/ version number. Eg jQmigrate thnx cc @RetireJS
1
[Paper] Comparing DOM based XSS Identification Tools on a Real World Vulnerability: bit.ly/comparingDOMXSSPaper #DOMXSS #tools #websec
2
48
31
New in the #BappStore: Retire.js pro.portswigger.net/bappstor…
1
10
6
Find insecure JS libs using the new ZAP @RetireJS add-on. Available from the Marketplace now. Thanks to Nikita Mundhada
14
7
Load more