retire.js shows which JavaScript libraries a web page uses and which of them have known vulnerabilities (CVE, GitHub Security Advisories), how severe they are and which version to upgrade to. The vulnerability database of the Retire.js project is downloaded every day, so new vulnerabilities appear without an add-on update. Optional OSV.dev lookups cover every npm package, and send only the library name and version. Libraries are found from file names, CDN addresses, file content and hashes,...