Currently the URL for the jsrepository.json is hardcoded in the Dependency Core in the  dependency-check.properties file. Unlike the CLI counterpart, where it is possible to overwrite the URL, it is not possible to do this using the Jenkins Plugin.

In a restricted environment, where the internet connection to that hardcoded URL is, not allowed, retirejs analyzer will fail.

It would be good if we can provide a way (for eg. in the Jenkins Global Configuration for Dependency Check Plugin) to overwrite this URL