bbc.co.uk 58 packages

Last scanned on Nov 1 at 03:45 PM
lodash.set 4.3.2Vulnerable
The lodash method `_.set` exported as a module.
License
MIT
Footprint
9 KB
Vulnerabilities
Prototype Pollution in lodash
Affected versions >=3.7.0
Matched Modules
Version distribution in production
43
4.3.2
17
4.3.1
0
3.7.0
0
3.7.1
0
3.7.2
0
3.7.3
uuid 8.3.0 - 8.3.2Outdated
RFC4122 (v1, v4, and v5) UUIDs
react-is 16.3.0 - 16.13.1Outdated
Brand checking of React Elements.
@babel/runtime 7.20.0Outdated
babel's modular runtime helpers
+1
hzoo
existentialism
nicolo-ribaudo
domhandler 5.0.0 - 5.0.3
Handler for htmlparser2 that turns pages into a dom
domelementtype 2.2.0 - 2.3.0
all the types of nodes in htmlparser2's dom
core-js 3.25.1 - 3.26.0Outdated
Standard library
scheduler 0.15.0 - 0.23.0
Cooperative scheduler for the browser environment.
prop-types 15.8.0 - 15.8.1
Runtime type checking for React props and similar objects.
react 16.13.0 - 18.2.0
React is a JavaScript library for building user interfaces.
react-dom 18.0.0 - 18.2.0
React package for working with the DOM.
date-fns 2.29.3Outdated
Modern JavaScript date utility library
kossnocorp
kossnocorp
@emotion/memoize 0.7.5 - 0.8.0Outdated
emotion's memoize utility
+1
emmatown
tkh44
emotion-release-bot
hoist-non-react-statics 3.3.1 - 3.3.2
Copies non-react specific statics from a child component to a parent component
mridgway
mridgway
@emotion/serialize 1.0.2 - 1.1.1Outdated
serialization utils for emotion
+1
emmatown
tkh44
emotion-release-bot
lodash.clonedeep 4.5.0
The lodash method `_.cloneDeep` exported as a module.
react-router 6.0.0 - 6.3.0Outdated
Declarative routing for React
@emotion/weak-memoize 0.1.1 - 0.3.0Outdated
A memoization function that uses a WeakMap
+1
emmatown
tkh44
emotion-release-bot
@storybook/theming 6.5.0 - 6.5.13Outdated
Core Storybook Components
react-router-dom 6.0.0 - 6.3.0Outdated
Declarative routing for React web applications
react-fast-compare 3.1.0 - 3.2.0Outdated
Fastest deep equal comparison for React. Great for React.memo & shouldComponentUpdate. Also really fast general-purpose deep comparison.
logform 2.3.0 - 2.4.2Outdated
An mutable object-based log format designed for chaining & objectMode streams.
crypto-browserify 1.0.9 - 2.0.0Outdated
implementation of crypto for the browser
+2
dcousens
ljharb
cwmma
js-cookie 3.0.1Outdated
A simple, lightweight JavaScript API for handling cookies
@emotion/react 11.0.0 - 11.10.5Outdated
> Simple styling in React.
+1
emmatown
tkh44
emotion-release-bot
shallowequal 1.0.1 - 1.1.0
Like lodash isEqualWith but for shallow equal.
polished 3.0.0 - 3.4.4Outdated
A lightweight toolset for writing styles in Javascript.
style-to-object 0.2.3 - 0.3.0Outdated
Parse CSS inline style to JavaScript object.
inline-style-parser 0.1.0 - 0.1.1Outdated
An inline style parser.
unfetch 2.0.0 - 2.0.1Outdated
Bare minimum fetch polyfill in 500 bytes
lodash.mergewith 4.6.1 - 4.6.2
The Lodash method `_.mergeWith` exported as a module.
@aws-sdk/middleware-retry 3.0.0 - 3.16.0Outdated
[![NPM version](https://img.shields.io/npm/v/@aws-sdk/middleware-retry/latest.svg)](https://www.npmjs.com/package/@aws-sdk/middleware-retry) [![NPM downloads](https://img.shields.io/npm/dm/@aws-sdk/middleware-retry.svg)](https://www.npmjs.com/package/@aws
+2
amzn-oss
aws-sdk-bot
kuhe
react-scripts 0.4.2Outdated
Configuration and scripts for Create React App.
+1
fb
timer
iansu
date-fns-tz 1.3.0 - 1.3.7Outdated
Time zone support for date-fns v3 with the Intl API
@datadog/browser-core 1.16.0 - 4.23.2Outdated
Datadog browser core utilities.
datadog
datadog
react-intersection-observer 9.1.0 - 9.3.5Outdated
Monitor if a component is inside the viewport, using IntersectionObserver API
lit-element 3.0.0Outdated
A simple base class for creating fast, lightweight web components
+11
aomarks
emarquez
sorvell
react-helmet-async 1.1.0 - 1.3.0Outdated
Thread-safe Helmet for React 16+ and friends
wonderboymusic
wonderboymusic
html-react-parser 1.4.5 - 3.0.4Outdated
HTML to React parser.
antd 4.4.2 - 4.23.6Outdated
An enterprise-class UI design language and React components implementation
react-property 2.0.0Outdated
HTML and SVG DOM property configs used by React.
style-to-js 1.1.1Outdated
Parses CSS inline style to JavaScript object (camelCased).
use-debounce 8.0.0 - 8.0.4Outdated
Debounce hook for react
react-hot-loader 4.9.0 - 4.13.0Outdated
Tweak React components in real time.
@chakra-ui/theme 2.1.0 - 2.1.3Outdated
The default theme for chakra components
murmurhash 0.0.1 - 0.0.2Outdated
A Node.js module for the optimized JavaScript implementation of the MurmurHash algorithms.
perezd
perezd
react-calendar 2.0.0 - 2.13.4Outdated
Ultimate calendar for your React app.
@loadable/component 5.15.0 - 5.15.2Outdated
React code splitting made easy.
iso8601-duration 2.1.0 - 2.1.1Outdated
Node/Js-module for parsing and making sense of ISO8601-durations
bootstrap-vue 2.0.0 - 2.15.0Outdated
With more than 85 components, over 45 available plugins, several directives, and 1000+ icons, BootstrapVue provides one of the most comprehensive implementations of the Bootstrap v4 component and grid system available for Vue.js v2.6, complete with extens
@optimizely/js-sdk-utils 0.1.0 - 0.4.0
Optimizely Full Stack Utils
optimizely-fullstack
optimizely-fullstack
@optimizely/js-sdk-event-processor 0.5.0 - 0.9.5Outdated
Optimizely Full Stack Event Processor
optimizely-fullstack
optimizely-fullstack
@optimizely/js-sdk-logging 0.1.0 - 0.3.1
Optimizely Full Stack Core Logging
optimizely-fullstack
optimizely-fullstack
@optimizely/js-sdk-datafile-manager 0.2.0 - 0.9.5
Optimizely Full Stack Datafile Manager
optimizely-fullstack
optimizely-fullstack
@optimizely/react-sdk 2.0.0 - 2.9.1Outdated
React SDK for Optimizely Feature Experimentation, Optimizely Full Stack (legacy), and Optimizely Rollouts
optimizely-fullstack
optimizely-fullstack
vue-resource 0.5.0 - 0.6.0Outdated
The HTTP client for Vue.js
lottie-api 1.0.0 - 1.0.2Outdated
A library to edit lottie-web animations dynamically
airnan
airnan
react-amphtml 3.1.0 - 4.0.2
Use amphtml components inside your React apps easily!
dfrankland
dfrankland