retire.js shows which JavaScript libraries a web page uses and which of them have known vulnerabilities (CVE, GitHub Security Advisories), how severe they are and which version to upgrade to. The vulnerability database of the Retire.js project is downloaded every day, so new vulnerabilities appear without an add-on update. Optional OSV.dev lookups cover every npm package, and send only the library name and version. Libraries are found from file names, CDN addresses, file content and hashes, license banners, inline scripts and global variables. The panel offers filters, sorting, JSON and CSV export, a dark theme and a touch-friendly layout on Firefox for Android. Manifest V3, Apache 2.0.
Features
- Detects vulnerable JavaScript libraries while you browse
- Retire.js database downloaded every day: always current
- Optional OSV.dev lookups for every npm package
- CDN URLs, file content, hashes, banners, inline scripts
- Global-variable probes: jQuery, Vue, React, Angular, lodash…
- Severity, CVE/GHSA links and the version to upgrade to
- First version without known issues, checked against the DB
- Badge with the number of vulnerable libraries per page
- Filters, sorting, JSON and CSV export
- Firefox for Android: full-width, touch-friendly panel
- Manifest V3, no eval, no remote code, no analytics
- Apache 2.0; based on the Retire.js project
License
Apache License V2.0Follow retire.js for Firefox
Other Useful Business Software
Paessler: Easy to Use With Enterprise Power. Free Trial
You shouldn't have to choose between a monitoring tool that's easy to use and one that's powerful enough for a complex environment. PRTG's low-code interface lets any admin build dashboards, set alerts and monitor devices without scripting, while custom sensors and full API access are there when your team needs deeper control. One platform, no compromise. Download a free 30-day trial now.
Rate This Project
Login To Rate This Project
User Reviews
Be the first to post a review of retire.js for Firefox!