Automic VaultAutomic Vault

brew

Install retire with Homebrew

Scanner detecting the use of JavaScript libraries with known vulnerabilities. Version 5.4.3 via Homebrew; verified 2026-05-27.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install retire

local Homebrew formula metadata

overview

Package summary

Scanner detecting the use of JavaScript libraries with known vulnerabilities

Commands and aliases

  • retire

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 1 platform targets.
  • Installs with 1 runtime dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
retirecliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version5.4.3
manager updated2026-05-27
local dataok
upstreamnot checked
latest detectednot detected

https://retirejs.github.io/retire.js/

install metadata

Package metadata

Package keybrew:retire
Version5.4.3
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/retire
Homepagehttps://retirejs.github.io/retire.js/
Repositoryhttps://github.com/RetireJS/retire.js
Upstream docshttps://github.com/RetireJS/retire.js#readme
LicenseApache-2.0
Source archivehttps://registry.npmjs.org/retire/-/retire-5.4.3.tgz
Last updated2026-05-27T10:02:28Z
Pulseupdated
Dependenciesnode
Bottleavailable (on all)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameretire
Version Scheme0
Revision0
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • nodeRuntime dependency declared by Homebrew.
  • retireSame normalized package name appears in another local ecosystem. Shared terms: analysis, composition, detecting, libraries, retire.

Same workflow

  • vetShares av.db curated category or tags: cli, dependency-analysis, security, software-composition-analysis.
  • bomberShares av.db curated category or tags: cli, sbom, security, vulnerability-scanner.
  • ternShares av.db curated category or tags: cli, sbom, security, software-composition-analysis.
  • trivyShares av.db curated category or tags: cli, sbom, security, vulnerability-scanner.
  • bomShares av.db curated category or tags: cli, sbom, security.
  • cargo-cyclonedxShares av.db curated category or tags: cli, sbom, security, software-composition-analysis.
  • retireSame normalized package name in another local ecosystem.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • package relationship graph
  • package version freshness
  • package-page enrichment