Apps similar to Retire.js include CVE Lite CLI, which is free and open source. Other options are Dependency-Check and cvechecker. In total there are three Vulnerability Scanners like Retire.js for Linux, Mac and Windows.
Scans JavaScript and TypeScript lockfiles for vulnerabilities, distinguishes direct versus transitive issues, generates severity-grouped copy-and-run fix commands, offers HTML and CI-ready reports, supports offline use, and works without sending any data.
Canada
Dependency-Check is a utility that identifies project dependencies and checks if there are any known, publicly disclosed, vulnerabilities. Currently Java and .NET dependencies are supported.
The goal of cvechecker is to report about possible vulnerabilities on your system, by scanning the installed software and matching the results with the CVE database. Indeed, this is not a bullet-proof method and you will most likely have many false positives (vulnerability is...
