Erlend Oftedal comments

Results 54 comments of


                                            Erlend Oftedal

jquery-migrate 1.4.1 detected as vulnerability despite missing any record in the repo

Can you run it once with -v and once without?

jquery-migrate 1.4.1 detected as vulnerability despite missing any record in the repo

This is very odd. I'm not able to reproduce this on node 4.8.2 with retire 1.6.1 unless I provide the -v option. And it clearly doesn't see it as vulnerable...

[Feature request] Indicate no results in Firefox Extensions

Firefox plugin is deprecated as we don't have any maintainers of it.

--dropexternal isn't being used?

Fixed in version 4.1.1

Result counter/indicator is not reset after switching to a site without any vulnerabilities

Firefox plugin is deprecated as we don't have any maintainers of it.

is there any way to filter redundant security vulnerabilities entries of same JS Library in response?

The CycloneDX-JSON export actually does this, so closing.

Using CLI version for checking a website rather than node projects

https://github.com/RetireJS/retire-scanner

Can retire generate cyclonedx SBOM with license of library

At this point this is not included and I’m not sure it’s something I want to maintain over time. However if someone wants to contribute license info to jsrepository.json, I...

Can retire generate cyclonedx SBOM with license of library

In retire 5.2.0

Upstream code from third party maintained browser plugins

Neither the Firefox plugin nor the chrome plugins are published in the stores. I know someone else have done it, but I don't know who, and they are not affiliated...