1hotels.com 110 packages

Last scanned on Jan 19 at 11:11 AM
lodash-es 4.17.5 - 4.17.10VulnerableOutdated
Lodash exported as ES modules.
License
MIT
Footprint
1 KB
Vulnerabilities
Prototype Pollution in lodash
Affected versions >=0 <4.17.14
Regular Expression Denial of Service (ReDoS) in lodash
Affected versions >=0 <4.17.11
Command Injection in lodash
Affected versions >=0 <4.17.21
Regular Expression Denial of Service (ReDoS) in lodash
Affected versions >=0 <4.17.21
Prototype Pollution in lodash
Affected versions >=3.7.0 <4.17.20
Matched Modules
Version distribution in production
3 519
4.17.21
1 221
4.17.20
526
4.10.0
420
4.17.11
419
4.17.15
404
4.17.10
lodash 4.17.16VulnerableOutdated
Lodash modular utilities.
axios 0.17.1 - 0.18.0VulnerableOutdated
Promise based HTTP client for the browser and node.js
react 0.10.0 - 0.13.3VulnerableOutdated
React is a JavaScript library for building user interfaces.
es5-ext 0.10.24 - 0.10.49VulnerableOutdated
ECMAScript extensions and shims
isarray 1.0.0 - 2.0.5
Array#isArray for older browsers
react-is 16.3.0 - 16.13.1Outdated
Brand checking of React Elements.
@babel/runtime 7.0.0 - 7.7.2Outdated
babel's modular runtime helpers
+1
hzoo
existentialism
nicolo-ribaudo
get-intrinsic 1.1.0 - 1.1.3Outdated
Get and robustly cache all JS language-level intrinsics at first require time
function-bind 1.1.0 - 1.1.1Outdated
Implementation of Function.prototype.bind
call-bind 1.0.1 - 1.0.2Outdated
Robustly `.call.bind()` a function
object-inspect 1.9.0Outdated
string representations of objects in node and the browser
has-symbols 1.0.2 - 1.0.3
Determine if the JS environment has Symbol support. Supports spec, or shams.
isobject 3.0.0 - 4.0.0
Returns true if the value is an object and not an array or null.
side-channel 1.0.4Outdated
Store information about any JS value in a side channel. Uses WeakMap if available.
is-plain-object 2.0.0 - 3.0.0Outdated
Returns true if an object was created by the `Object` constructor, or Object.create(null).
has-property-descriptors 1.0.0Outdated
Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD.
es-abstract 1.18.0 - 1.18.6Outdated
ECMAScript spec abstract operations.
define-properties 1.1.3 - 1.1.4Outdated
Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.
is-callable 1.2.3Outdated
Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.
object.assign 4.1.3 - 4.1.4Outdated
ES6 spec-compliant Object.assign shim. From https://github.com/es-shims/es6-shim
is-buffer 1.1.4 - 1.1.6Outdated
Determine if an object is a Buffer
object-keys 1.1.0 - 1.1.1
An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim
regexp.prototype.flags 1.2.0 - 1.3.2Outdated
ES6 spec-compliant RegExp.prototype.flags shim.
deepmerge 1.4.0 - 4.0.0Outdated
A library for deep (recursive) merging of Javascript objects
core-js 2.6.12Outdated
Standard library
is-regex 1.1.2Outdated
Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag
internal-slot 1.0.1 - 1.0.3Outdated
ES spec-like internal slots
is-date-object 1.0.1 - 1.0.3Outdated
Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
is-string 1.0.4 - 1.0.5Outdated
Is this value a JS String object or primitive? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
es-to-primitive 1.2.0 - 1.2.1
ECMAScript “ToPrimitive” algorithm. Provides ES5 and ES2015 versions.
function.prototype.name 1.0.3 - 1.1.0Outdated
An ES2015 spec-compliant `Function.prototype.name` shim
functions-have-names 1.1.1 - 1.2.3
Does this JS environment support the `name` property on functions?
object.values 1.0.0 - 1.1.6Outdated
ES2017 spec-compliant Object.values shim.
array-includes 3.0.3Outdated
An ES7/ES2016 spec-compliant `Array.prototype.includes` shim/polyfill/replacement that works as far down as ES3.
globalthis 1.0.0 - 1.0.2Outdated
ECMAScript spec-compliant polyfill/shim for `globalThis`
has 1.0.1 - 1.0.3Outdated
Object.prototype.hasOwnProperty.call shortcut
tarruda
tarruda
array.prototype.flat 1.2.1Outdated
An ES2019 spec-compliant `Array.prototype.flat` shim/polyfill/replacement that works as far down as ES3.
prop-types 15.8.0 - 15.8.1
Runtime type checking for React props and similar objects.
is-arguments 1.1.0Outdated
Is this an arguments object? It's a harder question than you think.
react-dom 16.4.1 - 16.4.2Outdated
React package for working with the DOM.
object.fromentries 2.0.3 - 2.0.6Outdated
ES proposal-spec-compliant Object.fromEntries shim.
object.entries 1.0.0 - 1.1.6Outdated
ES2017 spec-compliant Object.entries shim.
performance-now 0.1.3 - 2.1.0
Implements performance.now (based on process.hrtime).
meryn
meryn
yn 1.3.0Outdated
Parse yes/no like values
sindresorhus
sindresorhus
string.prototype.matchall 4.0.2 - 4.0.6Outdated
Spec-compliant polyfill for String.prototype.matchAll
object-is 1.1.0 - 1.1.5Outdated
ES2015-compliant shim for Object.is - differentiates between -0 and +0
is-set 2.0.1 - 2.0.2Outdated
Is this value a JS Set? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
is-map 2.0.1 - 2.0.2Outdated
Is this value a JS Map? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
hoist-non-react-statics 3.3.1 - 3.3.2
Copies non-react specific statics from a child component to a parent component
mridgway
mridgway
promise 8.0.1 - 8.1.0Outdated
Bare bones Promises/A+ implementation
forbeslindesay
then-promise-bot
classnames 2.2.6Outdated
A simple utility for conditionally joining classNames together
query-string 5.0.1 - 5.1.1Outdated
Parse and stringify URL query strings
react-transition-group 2.0.0 - 2.5.2Outdated
A react component toolset for managing animations
es-get-iterator 1.1.2 - 1.1.3
Get an iterator for any JS language value. Works robustly across all environments, all versions.
whatwg-fetch 3.4.0 - 3.6.2Outdated
A window.fetch polyfill.
jakechampion
mattandrews
mislav
object.getownpropertydescriptors 2.1.0 - 2.1.3Outdated
ES2017 spec-compliant shim for `Object.getOwnPropertyDescriptors` that works in ES5.
es-array-method-boxes-properly 1.0.0
Utility package to determine if an `Array.prototype` method properly boxes the callback's receiver and third argument.
ljharb
ljharb
redux 4.0.0Outdated
Predictable state container for JavaScript apps
react-redux 5.0.7Outdated
Official React bindings for Redux
raf 3.0.0 - 3.1.0Outdated
requestAnimationFrame polyfill for node and the browser
react-lifecycles-compat 3.0.4
Backwards compatibility polyfill for React class components
fb
sophiebits
redux-thunk 2.1.0 - 2.4.2Outdated
Thunk middleware for Redux.
string.prototype.padend 3.0.0 - 3.1.4Outdated
ES2017 spec-compliant String.prototype.padEnd shim.
hyphenate-style-name 1.0.2Outdated
Hyphenates a camelcased CSS property name
@firebase/util 1.4.0 - 1.8.0Outdated
_NOTE: This is specifically tailored for Firebase JS SDK usage, if you are not a member of the Firebase team, please avoid using this package_
+1
chholland
firebase-ops
feiyang.chen
@apollo/client 3.0.0 - 3.7.4Outdated
A fully-featured caching GraphQL client.
react-scripts 0.4.2Outdated
Configuration and scripts for Create React App.
+1
fb
timer
iansu
array.prototype.map 1.0.1 - 1.0.5Outdated
An ES5 spec-compliant `Array.prototype.map` shim/polyfill/replacement that works as far down as ES3.
iterate-iterator 1.0.0 - 1.0.2
Iterate any JS iterator. Works robustly in all environments, all versions.
promise.allsettled 1.0.4 - 1.0.6Outdated
ES Proposal spec-compliant shim for Promise.allSettled
formik 1.0.0 - 2.2.9Outdated
Build forms in React, without the tears
foreach 2.0.4 - 2.0.6
foreach component + npm package
jss 9.8.7Outdated
A lib for generating Style Sheets with JavaScript.
css-vendor 0.3.8Outdated
CSS vendor prefix detection and property feature testing.
enzyme-shallow-equal 1.0.4Outdated
Adaptation of react-addons-shallow-compare, for independent usage
promise.prototype.finally 3.1.1 - 3.1.4Outdated
ES Proposal spec-compliant shim for Promise.prototype.finally
string.prototype.padstart 3.0.0 - 3.1.4Outdated
ES2017 spec-compliant String.prototype.padStart shim.
react-beautiful-dnd 1.0.0 - 6.0.2Outdated
Beautiful and accessible drag and drop for lists with React
airbnb-prop-types 2.16.0
Custom React PropType validators that we use at Airbnb.
@material-ui/core 1.4.0Outdated
React components that implement Google's Material Design.
vue-i18n 2.0.0Outdated
Internationalization plugin for Vue.js
consolidated-events 1.0.0 - 1.1.1Outdated
Manage multiple event handlers using few event listeners
recompose 0.17.0 - 0.23.0Outdated
A React utility belt for function components and higher-order components
@babel/runtime-corejs2 7.0.0 - 7.20.7Outdated
babel's modular runtime helpers with core-js@2 polyfilling
+1
hzoo
existentialism
nicolo-ribaudo
react-portal 4.1.1 - 4.2.2
To make your life with React Portals easier.
brcast 3.0.0 - 3.0.1Outdated
Tiny data broadcaster with 0 dependencies
smoothscroll-polyfill 0.3.6Outdated
Smooth Scroll behavior polyfill
document.contains 1.0.2
Polyfill/shim for `document.contains`
react-outside-click-handler 1.3.0
A React component for dealing with clicks outside its subtree
+2
brieb
airbnbeng
lencioni
react-with-direction 1.0.0 - 1.4.0
Components to provide and consume RTL or LTR direction in React
+4
brieb
airbnbeng
lencioni
react-with-styles 4.1.0 - 5.0.0
[![Build Status][travis-svg]][travis-url] [![dependency status][deps-svg]][deps-url] [![dev dependency status][dev-deps-svg]][dev-deps-url] [![License][license-image]][license-url] [![Downloads][downloads-image]][downloads-url]
react-moment-proptypes 1.5.0 - 1.8.1
React proptype for moment module
react-dates 21.8.0
A responsive and accessible date range picker component built with React
+4
lencioni
ljharb
ahuth
global-cache 1.2.0 - 1.2.1
Sometimes you have to do horrible things, like use the global object to share a singleton. Abstract that away, with this!
react-with-styles-interface-css 6.0.0
Interface for react-with-styles outputting CSS
react-event-listener 0.5.9 - 0.6.6
A React component that allow to bind events on the global scope
bootstrap-vue 1.0.0 - 2.15.0Outdated
With more than 85 components, over 45 available plugins, several directives, and 1000+ icons, BootstrapVue provides one of the most comprehensive implementations of the Bootstrap v4 component and grid system available for Vue.js v2.6, complete with extens
jss-preset-default 4.0.0 - 4.5.0Outdated
Default preset for JSS with selected plugins.
semantic-ui-react 0.64.0 - 0.79.1Outdated
The official Semantic-UI-React integration.
layershifter
levithomason
react-jss 8.0.0 - 8.6.1Outdated
JSS integration with React
jss-nested 6.0.1
JSS plugin that enables support for nested selectors
jss-camel-case 6.1.0
JSS plugin that allows to write camel cased rule properties
jss-global 2.0.0 - 3.0.0
Global styles for JSS
jss-default-unit 7.0.0 - 8.0.2
JSS plugin that adds default custom unit to numeric values where needed
jss-vendor-prefixer 6.0.0 - 8.0.0Outdated
JSS plugin that handles vendor prefixes in the browser
jss-props-sort 5.0.0 - 6.0.0
JSS plugin that ensures style properties extend each other instead of override
lottie-api 1.0.0 - 1.0.2Outdated
A library to edit lottie-web animations dynamically
airnan
airnan
@rmwc/base 1.9.4 - 8.0.4Outdated
RMWC base module
jamesmfriedman
jamesmfriedman
@wix/image-kit 1.14.0 - 1.27.0Outdated
Standard library for generating canonical URL's for optimally consuming images at Wix
+23
mayaco
itaytay
amitde007