About
Community
coda.io
74 packages
Last scanned on Apr 16 at 01:38 PM
Update
Name
Size
Popularity
Severity
lodash
4.17.16
Vulnerable
Outdated
Lodash modular utilities.
Script
https://cdn.coda.io/assets/external-cms.0f73651f262d8f31a05a.entry.js
License
MIT
Footprint
8 KB
Vulnerabilities
High
GHSA-35jh-r3h4-6jhm
Command Injection in lodash
Affected versions >=0 <4.17.21
Moderate
GHSA-29mw-wpgm-hmr9
Regular Expression Denial of Service (ReDoS) in lodash
Affected versions >=0 <4.17.21
High
GHSA-p6mc-m468-83gw
Prototype Pollution in lodash
Affected versions >=3.7.0 <4.17.19
Matched Modules
Version distribution in production
3 846
4.17.16
946
4.17.21
337
4.17.20
322
4.17.15
302
4.17.19
301
4.17.13
Also used on 4830 websites
skype.com
20 packages
sentry.io
157 packages
pinterest.com
56 packages
pinimg.com
52 packages
Repository
Homepage
More
modules
stdlib
util
moment
2.19.0 - 2.25.1
Vulnerable
Outdated
Parse, validate, manipulate, and display dates
moment
date
time
parse
format
+4
+2
next
9.0.6 - 13.3.0
Vulnerable
Outdated
The React Framework
debug
4.3.4
Lightweight debugging utility for Node.js and the browser
debug
log
debugger
+1
ms
2.1.2 - 2.1.3
Tiny millisecond conversion utility
+5
uuid
8.3.0 - 9.0.1
RFC4122 (v1, v4, and v5) UUIDs
uuid
guid
rfc4122
isarray
0.0.0 - 0.0.1
Outdated
Array#isArray for older browsers
browser
isarray
array
juliangruber
react-is
16.3.0 - 18.2.0
Outdated
Brand checking of React Elements.
react
+1
inherits
2.0.4
Browser-friendly inheritance fully compatible with standard node.js inherits()
inheritance
class
klass
oop
object-oriented
+3
isaacs
qs
6.11.2
Outdated
A querystring parser that supports nesting and arrays, with a depth limit
querystring
qs
query
url
parse
+1
buffer
5.7.0 - 6.0.3
Node.js Buffer API, for the browser
arraybuffer
browser
browserify
buffer
compatible
+2
feross
function-bind
1.1.0 - 1.1.1
Outdated
Implementation of Function.prototype.bind
function
bind
shim
es5
path-to-regexp
1.7.0 - 1.8.0
Outdated
Express style path to RegExp utility
express
regexp
route
routing
+2
call-bind
1.0.1 - 1.0.2
Outdated
Robustly `.call.bind()` a function
javascript
ecmascript
es
js
callbind
+8
ljharb
object-inspect
1.12.2 - 1.12.3
Outdated
string representations of objects in node and the browser
inspect
util.inspect
object
stringify
pretty
has-symbols
1.0.2 - 1.0.3
Determine if the JS environment has Symbol support. Supports spec, or shams.
Symbol
symbols
typeof
sham
polyfill
+3
ljharb
rxjs
5.0.0 - 5.5.12
Outdated
Reactive Extensions for modern JavaScript
Rx
RxJS
ReactiveX
ReactiveExtensions
Streams
+5
side-channel
1.0.4
Outdated
Store information about any JS value in a side channel. Uses WeakMap if available.
weakmap
map
side
channel
metadata
ljharb
base64-js
1.3.0 - 1.5.1
Base64 encoding/decoding in pure JS
base64
es-abstract
1.18.7 - 1.20.4
Outdated
ECMAScript spec abstract operations.
ECMAScript
ES
abstract
operation
abstract operation
+4
ljharb
fast-json-stable-stringify
2.0.0 - 2.1.0
deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify without jsonify
json
stringify
deterministic
hash
stable
esp
is-callable
1.2.7
Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.
Function
function
callable
generator
generator function
+5
ljharb
has-tostringtag
1.0.0 - 1.0.2
Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.
javascript
ecmascript
symbol
symbols
tostringtag
+1
ljharb
is-buffer
1.1.4 - 1.1.6
Outdated
Determine if an object is a Buffer
arraybuffer
browser
browser buffer
browserify
buffer
+10
feross
is-typed-array
1.1.7 - 1.1.10
Outdated
Is this value a JS Typed Array? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag.
array
TypedArray
typed array
is
typed
+13
available-typed-arrays
1.0.5 - 1.0.6
Outdated
Returns an array of Typed Array names that are available in the current environment
typed
arrays
Float32Array
Float64Array
Int8Array
+8
ljharb
clone
2.1.0 - 2.1.2
deep cloning of objects and arrays
pvorb
util
0.12.0 - 0.12.5
Node.js's util module for all engines
util
+3
eventemitter3
2.0.0 - 5.0.1
EventEmitter3 focuses on performance while maintaining a Node.js AND browser compatible interface.
EventEmitter
EventEmitter2
EventEmitter3
Events
addEventListener
+10
for-each
0.3.3
A better forEach
requires-port
1.0.0
Check if a protocol requires a certain port number to be added to an URL.
port
require
http
https
ws
+11
has
1.0.1 - 1.0.3
Outdated
Object.prototype.hasOwnProperty.call shortcut
tarruda
scheduler
0.21.0 - 0.23.0
Outdated
Cooperative scheduler for the browser environment.
react
+1
prop-types
15.8.0 - 15.8.1
Runtime type checking for React props and similar objects.
react
is-arguments
1.1.1
Is this an arguments object? It's a harder question than you think.
arguments
js
javascript
is-arguments
is
+1
ljharb
react
17.0.0 - 18.2.0
Outdated
React is a JavaScript library for building user interfaces.
react
+1
react-dom
18.0.0 - 18.2.0
Outdated
React package for working with the DOM.
react
+2
url-parse
1.5.9 - 1.5.10
Small footprint URL parser that works seamlessly across Node.js and browser environments
URL
parser
uri
url
parse
+4
+1
querystringify
2.2.0
Querystringify - Small, simple but powerful query string parser.
query
string
query-string
querystring
qs
+4
+1
is-generator-function
1.0.10
Determine if a function is a native generator function.
generator
generator function
es6
es2015
yield
+2
ljharb
url
0.11.1 - 0.11.3
The core `url` packaged standalone for use with Browserify.
parsing
url
analyze
date-fns
1.26.0 - 3.6.0
Modern JavaScript date utility library
kossnocorp
clsx
2.0.1 - 2.1.0
Outdated
A tiny (239B) utility for constructing className strings conditionally.
classes
classname
classnames
lukeed
hoist-non-react-statics
3.3.1 - 3.3.2
Copies non-react specific statics from a child component to a parent component
react
mridgway
path-browserify
1.0.0 - 1.0.1
the path module from node core for browsers
browser
browserify
path
+36
sha.js
2.4.9 - 2.4.11
Streamable SHA hashes in pure javascript
pascalcase
1.0.0
Outdated
Convert a string to pascal case (upper camelcase).
change case
camel
camelcase
case
casing
+7
jonschlinkert
underscore
1.11.0 - 1.13.6
JavaScript's functional programming helper library.
util
functional
server
client
browser
memoize-one
6.0.0
A memoization library which only remembers the latest invocation
memoize
memoization
cache
performance
alexreardon
lodash-es
4.17.21
Lodash exported as ES modules.
es6
modules
stdlib
util
linkify-it
4.0.0 - 4.0.1
Outdated
Links recognition library with FULL unicode support
linkify
linkifier
autolink
autolinker
vitaly
prismjs
1.26.0 - 1.29.0
Lightweight, robust, elegant syntax highlighting. A spin-off project from Dabblet.
prism
highlight
+4
md5
2.2.1 - 2.3.0
js function for hashing messages with MD5
uc.micro
1.0.6
Outdated
Micro subset of unicode data files for markdown-it projects.
vitaly
crypto-js
3.1.2 - 4.2.0
JavaScript library of crypto standards.
security
crypto
Hash
MD5
SHA1
+15
evanvosberg
crypt
0.0.0 - 0.0.2
utilities for encryption and hashing
pvorb
charenc
0.0.0 - 0.0.2
character encoding utilities
pvorb
p-is-promise
3.0.0 - 4.0.0
Check if something is a promise
promise
is
detect
check
kind
+7
sindresorhus
styled-components
0.0.1 - 0.0.6
Outdated
CSS for the <Component> Age. Style components your way with speed, strong typing, and flexibility.
react
css
css-in-js
styled-components
styling
+1
@firebase/util
1.4.0 - 1.9.5
_NOTE: This is specifically tailored for Firebase JS SDK usage, if you are not a member of the Firebase team, please avoid using this package_
+1
framer-motion
7.3.5 - 9.0.2
Outdated
A simple and powerful JavaScript animation library
react animation
react
three
3d
pose
+8
+36
@angular/core
6.0.0 - 12.2.16
Outdated
Angular - the core framework
fp-ts
2.0.0 - 2.10.5
Outdated
Functional programming in TypeScript
typescript
algebraic-data-types
functional-programming
gcanti
framesync
4.1.0 - 6.1.2
A frame-synced render loop for JavaScript
animation
raf
popmotion
seedrandom
3.0.4 - 3.0.5
Seeded random number generator for Javascript.
seed
random
crypto
davidbau
parse-headers
2.0.3 - 2.0.5
Parse http headers, works with browserify/xhr
http
headers
kesla
lit-element
3.0.1 - 4.0.4
Outdated
A simple base class for creating fast, lightweight web components
+11
popmotion
3.7.0 - 11.0.5
The animator's toolbox
animation
ux
ui
popmotion
canvas animation
+11
popmotion
style-value-types
4.1.0 - 4.1.5
Outdated
Parsers, transformers and tests for special value types, eg: %, hex codes etc.
css
svg
hex
rgba
hsla
popmotion
redux-form
6.0.3 - 8.3.10
A higher order component decorator for forms using Redux and React
react
reactjs
flux
redux
react-redux
+3
instantsearch.js
4.39.2
Outdated
InstantSearch.js is a JavaScript library for building performant and instant search experiences with Algolia.
algolia
instantsearch
search
widget
vanilla
+10
browser-cookies
1.2.0
Tiny cookies library for the browser
cookies
cookie
client
voltace
picturefill
2.3.0 - 2.3.1
Outdated
A responsive image polyfill.
picturefill
srcset
picture
responsive
responsive images
@rmwc/base
6.0.0 - 14.1.4
Outdated
RMWC base module
rmwc
jamesmfriedman
Popular search queries
webpack.js.org
url
react-scripts
react
lottie-api
react-helmet-async
+7 packages
github.com
color-convert
@headlessui/react
hoist-non-react-statics
reactstrap
lit-html
+60 packages
pinterest.com
lodash
relay-runtime
react-relay
react-use
lodash-es
+51 packages
Popular packages
react
React is a JavaScript library for building user interfaces.
+6 634 websites
core-js
Standard library
+10 238 websites
es5-ext
ECMAScript extensions and shims
+10 229 websites
@babel/runtime
babel's modular runtime helpers
+8 352 websites
lodash
Lodash modular utilities.
+4 826 websites
axios
Promise based HTTP client for the browser and node.js
+4 742 websites