There is a plethora of JavaScript libraries for use on the web and in node.js apps out there. This greatly simplifies, but we need to stay updated on security fixes. "Using Components with Known Vulnerabilities" is now a part of the OWASP Top 10 and insecure libraries can pose a huge risk for your web app. The goal of Retire.js is to help you detect the use of versions with known vulnerabilities. Scan a web app or node app for use of vulnerable JavaScript libraries and/or node modules. grunt-retire scans your grunt-enabled app for use of vulnerable JavaScript libraries and/or node modules. Scans visited sites for references to insecure libraries and puts warnings in the developer console. An icon on the address bar displays will also indicate if vulnerable libraries were loaded. Retire.js has been adapted as a plugin for the penetration testing tools Burp and OWASP ZAP.

Features

  • A command line scanner
  • A grunt plugin
  • A Chrome extension
  • A Firefox extension
  • Burp and OWASP Zap plugin
  • Scan a web app or node app for use of vulnerable JavaScript libraries and/or node modules

Project Samples

Project Activity

See All Activity >

License

Apache License V2.0

Follow Retire.js

Retire.js Web Site

Other Useful Business Software
99.99% Uptime for MySQL and PostgreSQL on Google Cloud Icon
99.99% Uptime for MySQL and PostgreSQL on Google Cloud

Enterprise Plus edition delivers sub-second maintenance downtime and 2x read/write performance. Built for critical apps.

Cloud SQL Enterprise Plus gives you a 99.99% availability SLA with near-zero downtime maintenance—typically under 10 seconds. Get 2x better read/write performance, intelligent data caching, and 35 days of point-in-time recovery. Supports MySQL, PostgreSQL, and SQL Server with built-in vector search for gen AI apps. New customers get $300 in free credit.
Try Cloud SQL Free
Rate This Project
Login To Rate This Project

User Reviews

Be the first to post a review of Retire.js!

Additional Project Details

Programming Language

JavaScript

Related Categories

JavaScript Security Software, JavaScript Browser Extensions and Plugins, JavaScript Libraries, JavaScript Penetration Testing Tool

Registered

2022-05-09