retirejs doesnot detect pdfobject.js - Githubissues

RetireJS / retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

https://retirejs.github.io/retire.js/

Other

3.66k stars 414 forks source link

retirejs doesnot detect pdfobject.js #436

Closed rashmimehta300 closed 4 months ago

rashmimehta300 commented 4 months ago

Retire.js version: (retire --version): 4.3.1

node version: (node --version): v18.13.0

Description: retirejs does not detect pdfobject.js https://pdfobject.com/ https://security.snyk.io/package/npm/pdfobject

Expected behaviour: It should detect pdfobject libraries

If this is a false positive or false negative: false negative

How did you run the tool? Command line? Browser extension?
Can you provide a link to the file(s) containing the libraries?
Are the libraries bundeled with a minifier? If so which one?