Retire.js is described as 'The goal of Retire.js is to help you detect use of a JavaScript library version with known vulnerabilities' and is a vulnerability scanner in the security & privacy category. There are three alternatives to Retire.js for Linux, Mac and Windows. The best Retire.js alternative is CVE Lite CLI, which is both free and Open Source. Other great apps like Retire.js are Dependency-Check and cvechecker.
Scans JavaScript and TypeScript lockfiles for vulnerabilities, distinguishes direct versus transitive issues, generates severity-grouped copy-and-run fix commands, offers HTML and CI-ready reports, supports offline use, and works without sending any data.
Canada
Dependency-Check is a utility that identifies project dependencies and checks if there are any known, publicly disclosed, vulnerabilities. Currently Java and .NET dependencies are supported.
The goal of cvechecker is to report about possible vulnerabilities on your system, by scanning the installed software and matching the results with the CVE database. Indeed, this is not a bullet-proof method and you will most likely have many false positives (vulnerability is...
