Add Retire.js · FGRibreau/check-build#10

2014-11-11T13:27:15.000Z

It seems to me that [Retire](http://bekk.github.io/retire.js/) follows a different approach to identifying modules with vulnerabilities than Nsp does. If this is confirmed, I would support the inclusion of Retire to check-build. ## --- Want to back this issue? **[Post a bounty on it!](https://www.bountysource.com/issues/5915660-add-retire-js?utm_campaign=plugin&utm_content=tracker%2F7304231&utm_medium=issues&utm_source=github)** We accept bounties via [Bountysource](https://www.bountysource.com/?utm_campaign=plugin&utm_content=tracker%2F7304231&utm_medium=issues&utm_source=github).

(2 评论) (0 反应) (0 负责人)JavaScript (33 fork)batch import

enhancementhelp wanted

仓库指标

Star: (695 star)
PR 合并指标: (30 天内没有已合并 PR)

描述

It seems to me that Retire follows a different approach to identifying modules with vulnerabilities than Nsp does. If this is confirmed, I would support the inclusion of Retire to check-build.

Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.

贡献者指南

研究方向: 研究如何将 Retire.js 集成到 check build 中，查看其 CLI 选项和输出格式，然后将其添加为新的检查步骤。
技术栈: javascriptnodejs
领域: securitybackenddevops
议题类型: 功能
难度: 2
预计时间: 1-3 小时
活动状态: 较久未更新
清晰度: 清晰
前置要求: Node.jsnpmSecurity concepts
新手友好度: 60

仓库指标

描述

贡献者指南

每天在邮箱收到新鲜 Easy issues。