search

RetireJS / retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
https://retirejs.github.io/retire.js/
Other
3.66k stars 414 forks source link

Should we set up retire js and scan the code (without any internet). Please suggest . #324

Closed raja4dev closed 4 years ago

raja4dev commented 4 years ago

**Retire.js version: (retire --version):2.2.0

**node version: (node --version):v 12.16.2

Type: Question: Should we set up retire.js and scan the node modules (without any internet).

Description: Should we set up retire js and scan the code (without any internet). Please suggest

Expected behaviour:

Without any internet will retire.js works? Please let us know any offline methods

eoftedal commented 4 years ago

Yes, you can provide local copies of the repo

  --jsrepo <path|url>      Local or internal version of repo
  --noderepo <path|url>    Local or internal version of repo