retire.js

Free open source scanner for detecting use of JavaScript libraries with known vulnerabilities

[Robert Sösemann @rsoesemann]

Finally! Prime Time for the Salesforce Code Analyser This security checker wraps and harmonizes proven Open-Source like @pmd_analyzer, @geteslint, and @RetireJS. To bring them on par with commercial offerings Salesforce added a flexible Data Flow engine. https://t.co/Ylo8HrYudN

[retire.js @RetireJS]

Our name got a new meaning: https://t.co/EhdSVLYl5u

[retire.js @RetireJS]

What severity should we put on a library being End-of-Life? Low? Medium?

https://t.co/PWlwxOQCnQ

[Erlend Oftedal @webtonull]

The nodejs scanner part of retire.js is now deprecated. Will try to keep the frontend javascript scanner working, but with npm audit having so much higher quality, deprecating the node bit seems like the most responsible choice: https://t.co/7cethSTi1Y

[retire.js @RetireJS]

npm 6 is pretty awesome! This is output from npm install

[retire.js @RetireJS]

npm 6 will have built-in dependency auditing! This is great! It also means we will most likely deprecate the node.js scanning capability of retire.js and focus on client side libraries only.

https://t.co/nBr3oeLHMy

[retire.js @RetireJS]

Someone made a python command line scanner of retire.js. Scan a site from the CLI: https://t.co/soexEcQ7YG

[Erlend Oftedal @webtonull]

Retire.js made the front page news today here in Norway. Lots of govt web sites using vulnerable #js libs: https://t.co/BWqhk9sSH4

[retire.js @RetireJS]

@mj1856 Added to Retire.js both as node.js module and client side lib.

[Matt Johnson-Pint @mattjohnsonpint]

Hey #JavaScript developers. Using moment.js? We've plugged a potential security hole. Please update to 2.11.2. Thanks!

[retire.js @RetireJS]

"Top15 security predictions 2016
Ghosts of Internet Past
...old and broken JS versions that invite compromise..." https://t.co/2QhTPqx6Mj

[Javascript Digest @nodenow]

"Securing Your Node.js App" #javascript #nodejs https://t.co/6B3JCyX6gC

[retire.js @RetireJS]

@adam_baldwin Sure!

[retire.js @RetireJS]

Exciting stuff from @LiftSecurity : https://t.co/Eyb8DulLv4

[retire.js @RetireJS]

Current record from a scan:
6 different versions of jQuery loaded on the same page

[André N. Klingsheim @klingsen]

Go check your site for vulnerable JS libs here: https://t.co/sGhlwvX9j4 #siksym15

[retire.js @RetireJS]

Thanks to @Jhaddix for mentioning Retire.js in his talk at HouSecCon 6: https://t.co/FgIh02Z9h4

[Kadir Yılmaz @kadiryilmaz]

Retire.js ile Javascript Kütüphanelerinizin Güvenliğini Kontrol Edin http://t.co/lZlTb5f2Bu

[retire.js @RetireJS]

Could really use help in going through release notes of these WYSIWYG editors to look for vulnerabilities: https://t.co/3L75zF9c00 #js

[Kim Carter @binarymist]

Not using @RetireJS? You should be https://t.co/bB2CuZoTd0 #javascript #nodejs #besafe