About
Community
coconala.com
97 packages
Last scanned on Jan 19 at 10:01 AM
Update
Name
Size
Popularity
Severity
lodash.merge
3.3.0 - 3.3.2
Vulnerable
Outdated
The Lodash method `_.merge` exported as a module.
License
MIT
Vulnerabilities
Critical
GHSA-jf85-cpcp-j695
Prototype Pollution in lodash
Affected versions >=0 <4.6.2
High
GHSA-2m96-9w4j-wgv7
Prototype Pollution in lodash.merge
Affected versions >=0 <4.6.1
High
GHSA-h726-x36v-rx45
Prototype Pollution in lodash.merge
Affected versions >=0 <4.6.2
Version distribution in production
271
4.6.2
235
4.6.1
47
3.3.2
46
3.3.0
46
3.3.1
1
4.5.0
Also used on 323 websites
www.netflix.com
59 packages
nytimes.com
110 packages
hbr.org
85 packages
nyt.com
110 packages
Repository
Homepage
More
lodash-modularized
merge
swiper
4.5.1
Vulnerable
Outdated
Most modern mobile touch slider and framework with hardware accelerated transitions
swiper
swipe
slider
touch
ios
+12
nolimits4web
axios
0.19.2
Vulnerable
Outdated
Promise based HTTP client for the browser and node.js
xhr
http
ajax
promise
node
+1
moment
2.19.0 - 2.25.1
Vulnerable
Outdated
Parse, validate, manipulate, and display dates
moment
date
time
parse
format
+4
+2
es5-ext
0.10.24 - 0.10.49
Vulnerable
Outdated
ECMAScript extensions and shims
ecmascript
ecmascript5
ecmascript6
es5
es6
+11
medikoo
debug
2.6.8 - 2.6.9
Outdated
Lightweight debugging utility for Node.js and the browser
debug
log
debugger
+1
tslib
1.13.0 - 1.14.1
Outdated
Runtime library for TypeScript helper functions
TypeScript
Microsoft
compiler
language
javascript
+2
+5
ms
2.0.0
Outdated
Tiny millisecond conversion utility
+5
readable-stream
2.3.7
Outdated
Node.js Streams, a user-land copy of the stream library from Node.js
readable
stream
pipe
safe-buffer
5.2.1
Safer Node.js Buffer API
buffer
buffer allocate
node security
safe
safe-buffer
+2
string_decoder
1.1.0 - 1.3.0
The string_decoder module from Node core
string
decoder
browser
browserify
+1
isarray
1.0.0 - 2.0.5
Array#isArray for older browsers
browser
isarray
array
juliangruber
punycode
1.4.1
Outdated
A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.
punycode
unicode
idn
idna
dns
+2
inherits
2.0.4
Browser-friendly inheritance fully compatible with standard node.js inherits()
inheritance
class
klass
oop
object-oriented
+3
isaacs
qs
6.9.5 - 6.9.6
Outdated
A querystring parser that supports nesting and arrays, with a depth limit
querystring
qs
query
url
parse
+1
buffer
4.9.2
Outdated
Node.js Buffer API, for the browser
arraybuffer
browser
browserify
buffer
compatible
+2
feross
regenerator-runtime
0.13.7
Outdated
Runtime for Regenerator-compiled generator and async functions.
regenerator
runtime
generator
async
benjamn
@babel/runtime
7.12.0 - 7.12.18
Outdated
babel's modular runtime helpers
+1
core-util-is
1.0.2
Outdated
The `util.is*` functions introduced in Node v0.12.
util
isBuffer
isArray
isNumber
isString
+4
isaacs
ieee754
1.2.0 - 1.2.1
Read/write IEEE754 floating point numbers from/to a Buffer or array-like object
IEEE 754
buffer
convert
floating point
ieee754
feross
util-deprecate
1.0.2
The Node.js `util.deprecate()` function with browser support
util
deprecate
browserify
browser
node
tootallnate
base64-js
1.5.1
Base64 encoding/decoding in pure JS
base64
events
3.2.0
Outdated
Node's event emitter for all engines.
events
eventEmitter
eventDispatcher
listeners
deepmerge
4.2.2
Outdated
A library for deep (recursive) merging of Javascript objects
merge
deep
extend
copy
clone
+1
tehshrike
process-nextick-args
2.0.1
process.nextTick but always with args
cwmma
core-js
3.8.3
Outdated
Standard library
ES3
ES5
ES6
ES7
ES2015
+39
zloirock
xtend
4.0.1 - 4.0.2
extend like a boss
extend
merge
options
opts
object
+1
raynos
bluebird
3.7.2
Full featured Promises/A+ implementation with exceptionally good performance
promise
performance
promises
promises-a
promises-aplus
+8
esailija
process
0.11.10
process information for node.js and browsers
process
url
0.11.0
Outdated
The core `url` packaged standalone for use with Browserify.
parsing
url
analyze
dayjs
1.10.4
Outdated
2KB immutable date time library alternative to Moment.js with the same modern API
dayjs
date
time
immutable
moment
iamkun
css-loader
3.4.2 - 4.3.0
Outdated
css loader module for webpack
webpack
css
loader
url
import
setimmediate
1.0.5
A shim for the setImmediate efficient script yielding API
domenic
@sentry/types
5.27.0 - 6.3.6
Outdated
Types for all Sentry JavaScript SDKs
+8
@sentry/utils
5.30.0 - 6.0.2
Outdated
Utilities for all Sentry JavaScript SDKs
+8
@sentry/core
5.30.0
Outdated
Base implementation for all Sentry JavaScript SDKs
+8
lodash-es
4.17.20 - 4.17.21
Lodash exported as ES modules.
es6
modules
stdlib
util
stream-http
2.8.3
Outdated
Streaming http in the browser
http
stream
streaming
xhr
http-browserify
tailwindcss
3.0.0 - 3.1.6
Outdated
A utility-first CSS framework for rapidly building custom user interfaces.
timers-browserify
2.0.10 - 2.0.12
timers module for browserify
timers
browserify
browser
+36
https-browserify
1.0.0
https module compatability for browserify
browser
browserify
https
builtin-status-codes
3.0.0
The map of HTTP status codes from the builtin http module
http
status
codes
builtin
map
bendrucker
querystring-es3
0.2.1
Node's querystring module for all engines. (ES3 compat fork)
commonjs
query
querystring
spaintrain
ufo
0.7.11
Outdated
URL utils for humans
pi0
to-arraybuffer
1.0.1
Get an ArrayBuffer from a Buffer as fast as possible
buffer
to
arraybuffer
fast
read
+1
jhiesey
@sentry/browser
5.30.0
Outdated
Official Sentry SDK for browsers
+8
defu
3.2.2
Outdated
Recursively assign default properties. Lightweight and Fast!
pi0
unfetch
4.2.0
Outdated
Bare minimum fetch polyfill in 500 bytes
fetch
polyfill
xhr
ajax
developit
vue
2.6.12
Outdated
The progressive JavaScript framework for building modern web UI.
vue
web-vitals
2.1.4
Outdated
Easily measure performance metrics in JavaScript
crux
performance
metrics
Core Web Vitals
CLS
+5
@sentry/hub
5.27.6 - 6.0.4
Outdated
Sentry hub which handles global state managment.
+8
@sentry/integrations
5.28.0 - 6.0.0
Outdated
Pluggable integrations that can be used to enhance JS SDKs
+8
vue-router
3.5.1
Outdated
> - This is the repository for Vue Router 4 (for Vue 3) > - For Vue Router 3 (for Vue 2) see [vuejs/vue-router](https://github.com/vuejs/vue-router).
@sentry/minimal
5.29.1 - 6.16.1
Outdated
Sentry minimal library that can be used in other packages
+8
vue-loader
15.9.2 - 15.9.8
Outdated
> webpack loader for Vue Single-File Components
vue-style-loader
4.0.1 - 4.1.3
Vue.js style loader module for webpack
react-use
6.2.0
Outdated
Collection of React Hooks
streamich
xstate
4.7.0 - 4.19.1
Outdated
Finite State Machines and Statecharts for the Modern Web.
statechart
state machine
finite state machine
finite automata
scxml
+2
intersection-observer
0.11.0
Outdated
A polyfill for IntersectionObserver
Intersection
Observer
philipwalton
vuex
3.6.2
Outdated
state management for Vue.js
+1
react-query
0.0.11 - 0.0.15
Outdated
Hooks for managing, caching and syncing asynchronous and remote data in React
load-script
1.0.0 - 2.0.0
Dynamic script loading for browser
browser
script
load
ssr-window
1.0.1
Outdated
Better handling for window object in SSR environment
ssr
window
document
nolimits4web
deep-freeze
0.0.1
recursively Object.freeze() objects and functions
nopersonsmodules
dom7
2.1.5
Outdated
Minimalistic JavaScript library for DOM manipulation, with a jQuery-compatible API
dom
dom7
jquery
mobile
framework7
nolimits4web
body-scroll-lock
2.7.0 - 3.0.3
Outdated
Enables body scroll locking (for iOS Mobile and Tablet, Android, desktop Safari/Chrome/Firefox) without breaking scrolling of a target element (eg. modal/lightbox/flyouts/nav-menus)
body scroll
body scroll lock
react scroll lock
react scroll
scroll
+16
willmcpo
autosize
4.0.2
Outdated
Autosize is a small, stand-alone script to automatically adjust textarea height to fit text.
textarea
form
ui
jacklmoore
portal-vue
1.5.0 - 2.1.7
Outdated
> A Portal Component for Vue 3, to render DOM outside of a component, anywhere in the document.
linusborg
vue-meta
2.4.0
Manage HTML metadata in Vue.js components with ssr support
attribute
google
head
helmet
info
+8
+2
gatsby
1.9.197 - 1.9.201
Outdated
Blazing fast modern site generator for React
blog
generator
jekyll
markdown
react
+2
+10
sister
3.0.1 - 3.0.2
Event manager.
events
gajus
youtube-player
5.5.2
Outdated
YouTube IFrame Player API abstraction.
youtube
iframe
player
api
promise
+2
gajus
semantic-ui-react
1.1.0
Outdated
The official Semantic-UI-React integration.
vue-no-ssr
1.1.1
Vue component to wrap non SSR friendly components
vue-client-only
2.0.0
Outdated
Vue component to wrap non SSR friendly components
egoist
vuelidate
0.7.6
Outdated
Simple, lightweight model-based validation for Vue.js
@vue/composition-api
1.2.4
Outdated
Provide logic composition capabilities for Vue.
vue
composition-api
+2
vue-scrollto
2.20.0
Adds a directive that listens for click events and scrolls to elements.
vue
vuejs
directive
scroll
scrollto
+1
rigor789
cookie-universal
2.1.3 - 2.1.5
Outdated
Universal cookie plugin, perfect for SSR
universal cookie
SSR cookie
node cookie
browser cookie
cookies
+1
microcipcip
vue-gtag
1.14.1 - 2.0.1
Global Site Tag (gtag.js) plugin for Vue
google
google analytics
tracking
google tracking
vue-analytics
+6
matteo_gabriele
vue-awesome-swiper
4.1.1
Outdated
Swiper component for Vue
vue swiper
vue awesome swiper
vue carrousel
carrousel
swiper
surmon
vuex-router-sync
4.3.2 - 5.0.0
Effortlessly keep vue-router and vuex store in sync.
vuex
vue-router
vue
vue-social-sharing
2.4.7
Outdated
A Vue.js component for sharing links to social networks
nuxtjs
plugin
renderless-components
share
social
+9
nicolasbeauvais
vue2-touch-events
2.3.2
Outdated
Simple touch events support for vueJS2
vue
touch
tap
swipe
longtap
jerrybendy
lottie-api
1.0.0 - 1.0.2
Outdated
A library to edit lottie-web animations dynamically
airnan
vue-youtube
1.4.0
YouTube IFrame Player API wrapper
vue.js
youtube
player
api
plugin
anteriovieira
woothee
1.11.1
User-Agent string parser (js implementation)
tagomoris
prebid.js
7.16.0 - 7.32.0
Outdated
Header Bidding Management Library
advertising
auction
header bidding
prebid
+1
@improbable-eng/grpc-web
x.x.x
buefy
x.x.x
@improbable-eng/grpc-web-node-http-transport
x.x.x
google-protobuf
x.x.x
@nuxtjs/composition-api
x.x.x
vue-notification
x.x.x
@voerro/vue-tagsinput
x.x.x
@mdi/font
x.x.x
first-input-delay
x.x.x
Popular search queries
webpack.js.org
url
react-scripts
react
lottie-api
react-helmet-async
+7 packages
github.com
color-convert
@headlessui/react
hoist-non-react-statics
reactstrap
lit-html
+60 packages
pinterest.com
lodash
relay-runtime
react-relay
react-use
lodash-es
+51 packages
Popular packages
react
React is a JavaScript library for building user interfaces.
+6 634 websites
core-js
Standard library
+10 238 websites
es5-ext
ECMAScript extensions and shims
+10 229 websites
@babel/runtime
babel's modular runtime helpers
+8 352 websites
lodash
Lodash modular utilities.
+4 826 websites
axios
Promise based HTTP client for the browser and node.js
+4 742 websites