conrad.com 114 packages

Last scanned on Jan 19 at 08:44 AM
lodash 4.17.16VulnerableOutdated
Lodash modular utilities.
License
MIT
Footprint
6 KB
Vulnerabilities
Command Injection in lodash
Affected versions >=0 <4.17.21
Regular Expression Denial of Service (ReDoS) in lodash
Affected versions >=0 <4.17.21
Prototype Pollution in lodash
Affected versions >=3.7.0 <4.17.19
Matched Modules
Version distribution in production
3 846
4.17.16
946
4.17.21
337
4.17.20
322
4.17.15
302
4.17.19
301
4.17.13
tslib 1.2.0 - 2.4.1Outdated
Runtime library for TypeScript helper functions
uuid 7.0.0 - 8.0.0Outdated
RFC4122 (v1, v4, and v5) UUIDs
react-is 16.3.0 - 17.0.2Outdated
Brand checking of React Elements.
qs 6.10.0 - 6.10.1Outdated
A querystring parser that supports nesting and arrays, with a depth limit
@babel/runtime 7.15.4 - 7.16.3Outdated
babel's modular runtime helpers
+1
hzoo
existentialism
nicolo-ribaudo
get-intrinsic 1.1.0 - 1.1.1Outdated
Get and robustly cache all JS language-level intrinsics at first require time
function-bind 1.1.0 - 1.1.1Outdated
Implementation of Function.prototype.bind
call-bind 1.0.2Outdated
Robustly `.call.bind()` a function
object-inspect 1.11.0 - 1.11.1Outdated
string representations of objects in node and the browser
has-symbols 1.0.2 - 1.0.3
Determine if the JS environment has Symbol support. Supports spec, or shams.
isobject 3.0.0 - 4.0.0
Returns true if the value is an object and not an array or null.
side-channel 1.0.4Outdated
Store information about any JS value in a side channel. Uses WeakMap if available.
define-properties 1.1.3 - 1.1.4Outdated
Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.
has-tostringtag 1.0.0Outdated
Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.
object-keys 1.1.0 - 1.1.1
An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim
regexp.prototype.flags 1.2.0 - 1.3.2Outdated
ES6 spec-compliant RegExp.prototype.flags shim.
deepmerge 3.0.0 - 3.3.0Outdated
A library for deep (recursive) merging of Javascript objects
core-js 3.20.0 - 3.22.3Outdated
Standard library
is-regex 1.1.4
Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag
is-date-object 1.0.1 - 1.0.3Outdated
Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
@typescript-eslint/eslint-plugin 0.1.0 - 1.3.0Outdated
TypeScript plugin for ESLint
scheduler 0.15.0 - 0.23.0Outdated
Cooperative scheduler for the browser environment.
has 1.0.1 - 1.0.3Outdated
Object.prototype.hasOwnProperty.call shortcut
tarruda
tarruda
prop-types 15.8.0 - 15.8.1
Runtime type checking for React props and similar objects.
is-arguments 1.0.4Outdated
Is this an arguments object? It's a harder question than you think.
react 16.13.0 - 17.0.2Outdated
React is a JavaScript library for building user interfaces.
react-dom 16.13.0 - 16.14.0Outdated
React package for working with the DOM.
performance-now 0.1.3 - 2.1.0
Implements performance.now (based on process.hrtime).
meryn
meryn
deep-equal 1.1.0 - 1.1.1Outdated
node's assert.deepEqual algorithm
url 0.11.0Outdated
The core `url` packaged standalone for use with Browserify.
date-fns 2.0.0 - 2.29.3Outdated
Modern JavaScript date utility library
kossnocorp
kossnocorp
object-is 1.0.1 - 1.1.5Outdated
ES2015-compliant shim for Object.is - differentiates between -0 and +0
hoist-non-react-statics 2.5.1 - 3.3.2
Copies non-react specific statics from a child component to a parent component
mridgway
mridgway
querystring 0.2.0Outdated
Node's querystring module for all engines.
path-browserify 1.0.0 - 1.0.1
the path module from node core for browsers
@emotion/unitless 0.7.2 - 0.8.0Outdated
An object of css properties that don't accept values with units
+1
emmatown
tkh44
emotion-release-bot
classnames 2.3.0 - 2.3.1Outdated
A simple utility for conditionally joining classNames together
object.pick 1.1.2 - 1.3.0
Returns a filtered copy of an object with only the specified keys, similar to `_.pick` from lodash / underscore.
@emotion/hash 0.8.0 - 0.9.0Outdated
A MurmurHash2 implementation
+1
emmatown
tkh44
emotion-release-bot
graphql 14.0.0 - 14.7.0Outdated
A Query Language and Runtime which can target any service.
@emotion/utils 0.0.4 - 0.11.3Outdated
internal utils for emotion
+1
emmatown
tkh44
emotion-release-bot
@sentry/utils 6.17.0 - 6.18.1Outdated
Utilities for all Sentry JavaScript SDKs
+8
benvinegar
billyvg
mitsuhiko
memoize-one 5.1.0 - 5.1.1Outdated
A memoization library which only remembers the latest invocation
@emotion/sheet 0.9.1 - 0.9.4Outdated
emotion's stylesheet
+1
emmatown
tkh44
emotion-release-bot
@sentry/core 6.17.5Outdated
Base implementation for all Sentry JavaScript SDKs
+8
benvinegar
billyvg
mitsuhiko
@emotion/weak-memoize 0.1.1 - 0.3.0Outdated
A memoization function that uses a WeakMap
+1
emmatown
tkh44
emotion-release-bot
es5-ext 0.2.0 - 0.5.0Outdated
ECMAScript extensions and shims
lodash-es 4.17.21
Lodash exported as ES modules.
redux 4.0.1 - 4.2.0Outdated
Predictable state container for JavaScript apps
react-fast-compare 2.0.4Outdated
Fastest deep equal comparison for React. Great for React.memo & shouldComponentUpdate. Also really fast general-purpose deep comparison.
crypto-browserify 1.0.9 - 2.0.0Outdated
implementation of crypto for the browser
+2
dcousens
ljharb
cwmma
react-redux 7.2.5 - 7.2.9Outdated
Official React bindings for Redux
history 1.2.0 - 1.4.0Outdated
Manage session history with JavaScript
raf 1.0.0 - 3.4.1
requestAnimationFrame polyfill for node and the browser
yup 0.25.0 - 0.28.0Outdated
Dead simple Object schema validation
monastic.panic
monastic.panic
@sentry/browser 6.17.0 - 6.17.6Outdated
Official Sentry SDK for browsers
+8
benvinegar
billyvg
mitsuhiko
use-sidecar 0.0.1Outdated
Sidecar code splitting utils
copy-to-clipboard 3.3.0 - 3.3.1Outdated
Copy stuff into clipboard using JS with fallbacks
redux-thunk 2.1.0 - 2.4.2Outdated
Thunk middleware for Redux.
toggle-selection 1.0.5 - 1.0.6
Toggle current selected content in browser
throttle-debounce 2.2.0 - 3.0.1Outdated
Throttle and debounce functions.
lodash.throttle 4.1.1
The lodash method `_.throttle` exported as a module.
react-select 3.0.3 - 5.7.0Outdated
A Select control built with and for ReactJS
@emotion/stylis 0.8.1Outdated
A custom build of Stylis
+1
emmatown
tkh44
emotion-release-bot
react-popper 1.3.4 - 2.1.0Outdated
Official library to use Popper on React projects
react-i18next 8.0.1 - 9.0.10Outdated
Internationalization for react done right. Using the i18next i18n ecosystem.
@sentry/hub 6.17.0 - 6.18.1Outdated
Sentry hub which handles global state managment.
+8
benvinegar
billyvg
mitsuhiko
@apollo/client 3.0.0 - 3.7.4Outdated
A fully-featured caching GraphQL client.
@sentry/react 6.17.0 - 6.19.7Outdated
Official Sentry SDK for React.js
+8
benvinegar
billyvg
mitsuhiko
@sentry/integrations 6.17.5 - 6.17.7Outdated
Pluggable integrations that can be used to enhance JS SDKs
+8
benvinegar
billyvg
mitsuhiko
@sentry/minimal 4.3.3 - 6.19.7
Sentry minimal library that can be used in other packages
+8
benvinegar
billyvg
mitsuhiko
react-onclickoutside 6.2.0 - 6.12.2Outdated
An onClickOutside wrapper for React components
is-in-browser 1.0.2 - 1.1.2Outdated
Simple check to see if current app is running in browser
tuxsudo
tuxsudo
@emotion/core 10.1.1 - 10.3.1Outdated
+1
emmatown
tkh44
emotion-release-bot
@react-aria/ssr 3.1.0Outdated
Spectrum UI components in React
devongovett
aspro83
react-input-autosize 2.2.2Outdated
Auto-resizing Input Component for React
gud 1.0.0
Create a 'gud nuff' (not cryptographically secure) globally unique id
screenfull 5.0.0 - 5.2.0Outdated
Simple wrapper for cross-browser usage of the JavaScript Fullscreen API, which lets you bring the page or any element into fullscreen.
sindresorhus
sindresorhus
react-use 17.3.2 - 17.4.0Outdated
Collection of React Hooks
streamich
streamich
rc-motion 2.2.0 - 2.4.5Outdated
React lifecycle controlled motion library
@xobotyi/scrollbar-width 1.9.1 - 1.9.5
A tool to get browser's scrollbars width.
rc-select 8.6.7 - 8.6.8Outdated
React Select
@stripe/react-stripe-js 1.14.0 - 1.16.4Outdated
React components for Stripe.js and Stripe Elements
to-no-case 1.0.2
Remove any existing casing from a string.
to-space-case 1.0.0
Convert a string to space case.
notistack 0.1.3 - 0.9.0Outdated
Highly customizable notification snackbars (toasts) that can be stacked on top of each other
diacritics 1.2.0 - 1.3.0
remove diacritics from strings
react-portal 4.1.1 - 4.2.2
To make your life with React Portals easier.
react-responsive 3.0.0 - 4.1.0Outdated
Media queries in react for responsive design
smoothscroll-polyfill 0.4.4
Smooth Scroll behavior polyfill
to-camel-case 0.2.1 - 1.0.0
Convert a string to camel case.
reactstrap 7.0.1 - 8.10.1Outdated
React Bootstrap components
react-scroll 1.7.14Outdated
A scroll component for React.js
react-paginate 6.3.1 - 6.3.2Outdated
A ReactJS component that creates a pagination.
ev-emitter 1.1.1Outdated
lil' event emitter
bootstrap-vue 2.0.0 - 2.15.0Outdated
With more than 85 components, over 45 available plugins, several directives, and 1000+ icons, BootstrapVue provides one of the most comprehensive implementations of the Bootstrap v4 component and grid system available for Vue.js v2.6, complete with extens
desandro-matches-selector 2.0.0 - 2.0.1Outdated
matches/matchesSelector helper
add-px-to-style 1.0.0
Will add px to the end of style values which are Numbers
prefix-style 2.0.0 - 2.0.1
gets a prefixed name for a css style
dom-css 2.1.0
fast dom CSS styling
semantic-ui-react 1.1.0Outdated
The official Semantic-UI-React integration.
layershifter
levithomason
react-bootstrap-typeahead 5.2.0 - 5.2.2Outdated
React typeahead with Bootstrap styling
react-custom-scrollbars 4.1.2 - 4.2.1
React scrollbars component
react-collapse 4.0.2 - 4.0.3Outdated
Component-wrapper for collapse animation for elements with variable (and dynamic) height
flickity 2.2.0 - 2.2.1Outdated
Touch, responsive, flickable carousels
react-click-outside 3.0.1
A component wrapper that provides click outside detection.
picturefill 3.0.0 - 3.0.3
A responsive image polyfill.
tiny-slider 2.9.4
Vanilla javascript slider for all purposes, inspired by Owl Carousel.
ganlanyuan
ganlanyuan
vanilla-lazyload 7.1.0 - 7.2.1Outdated
LazyLoad is a lightweight (2.4 kB) and flexible script that speeds up your web application by deferring the loading of your below-the-fold images, videos and iframes to when they will enter the viewport. It's written in plain "vanilla" JavaScript, it leve
botframework-webchat 4.15.3 - 4.15.6Outdated
A highly-customizable web-based chat client for Azure Bot Services.
+5
botframework
sgellock
cwhitten
react-amphtml 3.1.0 - 4.0.2
Use amphtml components inside your React apps easily!
dfrankland
dfrankland
@quintype/components 2.22.0 - 3.2.0Outdated
Components to help build Quintype Node.js apps
tg-core-components 2.0.0 - 6.3.0Outdated
tg-core-components
+4
albinadolfsson
codebetniklas
sebost