retire.js shows which JavaScript libraries a web page uses and which of them have known vulnerabilities (CVE, GitHub Security Advisories), how severe they are and which version to upgrade to. The vulnerability database of the Retire.js project is downloaded every day, so new vulnerabilities appear without an add-on update. Optional OSV.dev lookups cover every npm package, and send only the library name and version. Libraries are found from file names, CDN addresses, file content and hashes, license banners, inline scripts and global variables. The panel offers filters, sorting, JSON and CSV export, a dark theme and a touch-friendly layout on Firefox for Android. Manifest V3, Apache 2.0.
Features
- Detects vulnerable JavaScript libraries while you browse
- Retire.js database downloaded every day: always current
- Optional OSV.dev lookups for every npm package
- CDN URLs, file content, hashes, banners, inline scripts
- Global-variable probes: jQuery, Vue, React, Angular, lodash…
- Severity, CVE/GHSA links and the version to upgrade to
- First version without known issues, checked against the DB
- Badge with the number of vulnerable libraries per page
- Filters, sorting, JSON and CSV export
- Firefox for Android: full-width, touch-friendly panel
- Manifest V3, no eval, no remote code, no analytics
- Apache 2.0; based on the Retire.js project
License
Apache License V2.0Follow retire.js for Firefox
Other Useful Business Software
Build Agents and Models on One Platform
Gemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
Rate This Project
Login To Rate This Project
User Reviews
Be the first to post a review of retire.js for Firefox!