I'm trying add some tools to my application for security scanning and I came across this tool Retire.js

I wasn't sure whether it makes sense to add it to my application, since from briefly reading documentation for both Retire.js and npm audit I got a feeling that it does the same analysis. Would this be correct? And if no, would it be recommended to use Retire.js on top of regularly running npm audit?

Stack:

  • Frontend: React app built with Create-React-App
  • Backend: Node.JS + Express app
0

There are 0 best solutions below