---
schema_version: "1"
id: 51f4cba2ccfb6a463eac0c4af53f8f7e2c6bc04ebdb80d2bdc22d65c0c90f165
title: RetireJS
collection: developer
version: current
locale: en-us
portal_url: https://docs.salesforce.com/developer/current/en-us/code-analyzer/salesforce-code-analyzer/guides/engine-retire-js.md
canonical_url: https://developer.salesforce.com/docs/platform/salesforce-code-analyzer/guide/engine-retire-js.html
source_site: developer.salesforce.com
content_type: documentation
content_hash: b556047ae9b0073364cf7de8f7757363353ec1c561ea902ce2b781077e5bfd64
products:
  - Salesforce Code Analyzer
---
# RetireJS

RetireJS is an engine that analyzes a project’s third-party JavaScript dependencies and identifies security vulnerabilities. It has a thriving community, and its database of vulnerable libraries is updated frequently.

## Available RetireJS Rules

Run this command to view detailed information about all the RetireJS rules:

```bash
sf code-analyzer rules --rule-selector retire-js --view detail
```

For information on how to modify rule settings, such as their severity or tags, see [Customize Your Configuration](https://developer.salesforce.com/docs/platform/salesforce-code-analyzer/guide/config-custom.md). While the examples show modifying rules for the ESLint and Regex engines, you use the same process to modify RetireJS rules.

## RetireJS Configuration Reference

You can configure the RetireJS engine with the settings listed in this table. See [Customize the Configuration](https://developer.salesforce.com/docs/platform/salesforce-code-analyzer/guide/config-custom.md) for details on how to apply the settings.

| Field | Type | Description |
| --- | --- | --- |
| `disable_engine` | boolean | Whether to turn off the 'retire-js' engine so that it is not included when running Code Analyzer commands. Default value is `false`. |