I'm trying add some tools to my application for security scanning and I came across this tool Retire.js
I wasn't sure whether it makes sense to add it to my application, since from briefly reading documentation for both Retire.js and npm audit I got a feeling that it does the same analysis. Would this be correct? And if no, would it be recommended to use Retire.js on top of regularly running npm audit?
Stack:
- Frontend: React app built with Create-React-App
- Backend: Node.JS + Express app