The following tools are required for this recipe:
- RetireJS: RetireJS detects the use of JavaScript libraries with known vulnerabilities. RetireJS can be downloaded via its GitHub repository (https://github.com/RetireJS/retire.js) or via npm using the following command:
npm install -g retire
- Node Security Platform (NSP): NSP detects the use of known vulnerable NodeJS packages for a project. NSP can be installed via its GitHub repository (https://github.com/nodesecurity/nsp) or via npm using the following command:
npm install -g nsp
- LibScanner: LibScanner is a free tool that parses RPM or SWID package lists against the NVD databases used for Yocto build environments. LibScanner can be downloaded from its GitHub repository ...