# RetireJS

RetireJS is an engine that analyzes a project’s third-party JavaScript dependencies and identifies security vulnerabilities. It has a thriving community, and its database of vulnerable libraries is updated frequently.

## Available RetireJS Rules

Run this command to view detailed information about all the RetireJS rules:

```bash
sf code-analyzer rules --rule-selector retire-js --view detail
```

For information on how to modify rule settings, such as their severity or tags, see [Customize Your Configuration](/docs/platform/salesforce-code-analyzer/guide/config-custom.md). While the examples show modifying rules for the ESLint and Regex engines, you use the same process to modify RetireJS rules.

## RetireJS Configuration Reference

You can configure the RetireJS engine with the settings listed in this table. See [Customize the Configuration](/docs/platform/salesforce-code-analyzer/guide/config-custom.md) for details on how to apply the settings.

| Field            | Type    | Description                                                                                                                          |
| ---------------- | ------- | ------------------------------------------------------------------------------------------------------------------------------------ |
| `disable_engine` | boolean | Whether to turn off the 'retire-js' engine so that it is not included when running Code Analyzer commands. Default value is `false`. |