awesome-repositories.com
Blog
MCP
awesome-repositories.com

Descubre los mejores repositorios open-source con nuestra búsqueda potenciada por IA.

ExplorarBúsquedas curadasAlternativas open-sourceSoftware autohospedableBlogMapa del sitio
ProyectoServidor MCPAcerca deCómo clasificamosPrensa
Aviso legalPrivacidadTérminos
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
·
RetireJS avatar

RetireJS/retire.js

0
View on GitHub↗

Retire.js

Retire.js es un escáner de vulnerabilidades y analizador de seguridad de dependencias para JavaScript. Identifica librerías de JavaScript obsoletas o inseguras con fallos de seguridad conocidos dentro de aplicaciones web y proyectos locales.

La herramienta funciona como una utilidad de auditoría de seguridad web que puede utilizarse durante pruebas de penetración para detectar scripts vulnerables en sitios web en vivo. Admite la generación de listas de materiales de software (SBOM) utilizando el formato CycloneDX para documentar las dependencias del proyecto.

El sistema utiliza detección de librerías basada en firmas y coincidencia de patrones para mapear las versiones identificadas contra una base de datos de seguridad basada en JSON. Las capacidades de escaneo incluyen el uso de navegadores headless para analizar scripts cargados por aplicaciones en ejecución.

Búsqueda con IA

Explora más repositorios increíbles

Describe lo que necesitas en lenguaje sencillo: la IA clasifica miles de proyectos open-source curados por relevancia.

Start searching with AI
retirejs.github.io/retire.js
↗

Features

  • JavaScript Libraries - Identifies outdated or insecure JavaScript libraries within projects and live websites to mitigate security risks.
  • Dependency Vulnerability Scanning - Analyzes project dependencies to identify outdated libraries with documented security vulnerabilities.
  • JavaScript Dependency Tree Scanners - Provides a specialized scanner for identifying vulnerabilities in JavaScript dependency trees across projects and web apps.
  • Library Detection - Detects insecure libraries on visited websites using headless scanners or browser extensions to alert users.
  • Vulnerability Matching - Matches detected library versions against known vulnerability databases using version range comparisons.
  • Third Party Dependency Risk Assessment - Analyzes third-party modules to identify known security flaws and outdated versions.
  • Vulnerable Library Detectors - Detects the use of outdated software libraries with known security vulnerabilities across various environments.
  • Web Security Auditing - Functions as a tool for auditing the security posture of web applications by detecting insecure scripts.
  • Rule-Based Library Matching - Detects library versions by scanning source code for unique identifying strings and metadata markers.
  • SBOM Generators - Produces a Software Bill of Materials in CycloneDX format to document all detected project dependencies.
  • Multi-Format Exports - Provides the capability to export discovered dependencies into standardized machine-readable formats like CycloneDX.
  • Pentesting Toolkits - Provides scanning capabilities that can be embedded into penetration testing toolkits to identify vulnerable scripts.
  • Web Application Penetration Testing - Integrates security scanning into penetration testing workflows to detect vulnerable scripts on live web applications.
  • Software Bill of Materials Generators - Generates a detailed Software Bill of Materials using the CycloneDX format for security auditing.
  • Headless Browsers - Utilizes a headless browser environment to intercept and analyze JavaScript files loaded by live web applications.
  • Technology Fingerprinting - Detects vulnerable JavaScript libraries.
  • Dependency Management - Detects vulnerable JavaScript library versions.
  • Testing Tools - Scanner for detecting vulnerable JavaScript dependencies.
  • Vulnerability Exploitation Frameworks - Detects vulnerable JavaScript libraries.
  • Vulnerability Scanners - Detects vulnerable JavaScript libraries.
4,141 estrellas·437 forks·JavaScript·Apache-2.0·10 vistas

Historial de estrellas

Gráfico del historial de estrellas de retirejs/retire.jsGráfico del historial de estrellas de retirejs/retire.js

Alternativas open-source a Retire.js

Proyectos open-source similares, clasificados según cuántas características comparten con Retire.js.
  • xmirrorsecurity/opensca-cliAvatar de XmirrorSecurity

    XmirrorSecurity/OpenSCA-cli

    1,115Ver en GitHub↗

    OpenSCA-cli is an open-source software composition analysis tool and vulnerability management command-line interface that inspects third-party dependencies for known security vulnerabilities and compliance risks. It parses package manager configuration and lock files across diverse programming languages to extract software component trees and generate standard inventory reports. The tool performs local vulnerability matching against embedded or downloaded databases without requiring external network connections, ensuring complete data privacy. It includes a license compliance engine that eval

    Gocyclonedxdevsecopslicense-compliance
    Ver en GitHub↗1,115
  • dependencytrack/dependency-trackAvatar de DependencyTrack

    DependencyTrack/dependency-track

    3,612Ver en GitHub↗

    Dependency-Track is a software composition analysis tool and vulnerability management system designed to track dependencies and supply chain risk. It functions as a platform for ingesting and analyzing CycloneDX software bills of materials to identify known vulnerabilities and license compliance issues within third-party software components. The system distinguishes itself by mirroring external vulnerability databases locally to enable fast offline analysis and using VEX documents to differentiate between technical vulnerabilities and actual contextual risks. It also integrates with identity

    Javaappsecbill-of-materialsbom
    Ver en GitHub↗3,612
  • anchore/syftAvatar de anchore

    anchore/syft

    8,399Ver en GitHub↗

    Syft is a software bill of materials generator, container image scanner, and software dependency catalog. It analyzes container images and filesystems to produce comprehensive inventories of installed packages and dependencies in standard formats. Additionally, it serves as a software attestation tool and an SBOM format converter. The project distinguishes itself through the ability to create cryptographically signed attestations for software inventories to ensure provenance and integrity. It also provides the capability to transform software bills of materials between different industry sche

    Gocontainerscyclonedxdocker
    Ver en GitHub↗8,399
  • snyk/cliAvatar de snyk

    snyk/cli

    5,428Ver en GitHub↗

    The Snyk CLI is a command-line security scanner that detects known vulnerabilities across open-source dependencies, proprietary application code, container images, and infrastructure-as-code configuration files. It also serves as a platform management tool, allowing users to configure organizations, users, SSO, and reporting from the terminal rather than the web dashboard. The CLI integrates directly into development workflows, enabling scanning within IDEs, build pipelines, and version control systems. It implements static analysis with interfile data flow analysis to find complex security f

    TypeScriptmonitorsecuritysnyk
    Ver en GitHub↗5,428
Ver las 30 alternativas a Retire.js→

Preguntas frecuentes

¿Qué hace retirejs/retire.js?

Retire.js es un escáner de vulnerabilidades y analizador de seguridad de dependencias para JavaScript. Identifica librerías de JavaScript obsoletas o inseguras con fallos de seguridad conocidos dentro de aplicaciones web y proyectos locales.

¿Cuáles son las características principales de retirejs/retire.js?

Las características principales de retirejs/retire.js son: JavaScript Libraries, Dependency Vulnerability Scanning, JavaScript Dependency Tree Scanners, Library Detection, Vulnerability Matching, Third Party Dependency Risk Assessment, Vulnerable Library Detectors, Web Security Auditing.

¿Qué alternativas de código abierto existen para retirejs/retire.js?

Las alternativas de código abierto para retirejs/retire.js incluyen: xmirrorsecurity/opensca-cli — OpenSCA-cli is an open-source software composition analysis tool and vulnerability management command-line interface… dependencytrack/dependency-track — Dependency-Track is a software composition analysis tool and vulnerability management system designed to track… anchore/syft — Syft is a software bill of materials generator, container image scanner, and software dependency catalog. It analyzes… snyk/cli — The Snyk CLI is a command-line security scanner that detects known vulnerabilities across open-source dependencies,… snyk/snyk — Snyk is an application security testing platform designed to identify and remediate vulnerabilities across source… dependabot/dependabot-core — dependabot-core is the automated dependency management engine that powers multi-ecosystem package updates and…