RetireJS / retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

Home Page:https://retirejs.github.io/retire.js/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

retirejs doesnot detect pdfobject.js

rashmimehta300 opened this issue · comments

Retire.js version: (retire --version): 4.3.1

node version: (node --version): v18.13.0

Description: retirejs does not detect pdfobject.js
https://pdfobject.com/
https://security.snyk.io/package/npm/pdfobject

Expected behaviour: It should detect pdfobject libraries

If this is a false positive or false negative: false negative

  • How did you run the tool? Command line? Browser extension?
  • Can you provide a link to the file(s) containing the libraries?
  • Are the libraries bundeled with a minifier? If so which one?