List of NPM packages that are used on creditkarma.com - GradeJS

About Community

creditkarma.com 16 packages

Last scanned on Oct 27 at 06:26 PM

lodash 4.17.16VulnerableOutdated

Lodash modular utilities.

Script

https://creditkarmacdn-a.akamaihd.net/res/content/bundles/cfwk_raw-tracker-web/2.13.1/index.js https://creditkarmacdn-a.akamaihd.net/res/content/bundles/homepage/2.4.20/vendor.bundle.js

License

MIT

Footprint

9 KB

Vulnerabilities

HighGHSA-35jh-r3h4-6jhm

Command Injection in lodash

Affected versions >=0 <4.17.21

ModerateGHSA-29mw-wpgm-hmr9

Regular Expression Denial of Service (ReDoS) in lodash

Affected versions >=0 <4.17.21

HighGHSA-p6mc-m468-83gw

Prototype Pollution in lodash

Affected versions >=3.7.0 <4.17.19

Matched Modules

Version distribution in production

3 846

4.17.16

946

4.17.21

337

4.17.20

322

4.17.15

302

4.17.19

301

4.17.13

Also used on 4830 websites

Repository Homepage

modules stdlib util

es5-ext 0.10.24 - 0.10.49VulnerableOutdated

ECMAScript extensions and shims

ecmascript ecmascript5 ecmascript6 es5 es6+11

medikoo

core-js 2.5.2 - 2.6.12Outdated

Standard library

ES3 ES5 ES6 ES7 ES2015+39

zloirock

scheduler 0.15.0 - 0.23.0

Cooperative scheduler for the browser environment.

+1

prop-types 15.8.0 - 15.8.1

Runtime type checking for React props and similar objects.

react 16.13.0 - 17.0.2Outdated

React is a JavaScript library for building user interfaces.

+1

query-string 5.0.1 - 5.1.1Outdated

Parse and stringify URL query strings

browser querystring query string qs+9

sindresorhus

ua-parser-js 0.7.31 - 1.0.2Outdated

Detect Browser, Engine, OS, CPU, and Device type/model from User-Agent & Client Hints data. Supports browser & node.js environment

user-agent client-hints parser browser engine+9

faisalman

whatwg-fetch 3.4.0 - 3.6.2Outdated

A window.fetch polyfill.

lodash-es 4.17.21

Lodash exported as ES modules.

es6 modules stdlib util

babel-runtime 6.18.0 - 6.26.0

babel selfContained runtime

styled-jsx 2.2.6 - 2.2.7Outdated

Full CSS support for JSX without compromises

babel-plugin-macros vercel zeit css-in-js css

js-string-escape 0.0.1 - 1.0.1

Escape strings for use as JavaScript string literals

string escape backslash javascript ecmascript

joliss

string-hash 1.1.1 - 1.1.3

fast string hashing function

bootstrap-vue 1.0.0 - 2.15.0Outdated

With more than 85 components, over 45 available plugins, several directives, and 1000+ icons, BootstrapVue provides one of the most comprehensive implementations of the Bootstrap v4 component and grid system available for Vue.js v2.6, complete with extens

Bootstrap Bootstrap v4 Bootstrap for Vue Vue Vue.js+54

+1

store 1.3.20Outdated

A localStorage wrapper for all browsers without using cookies or flash. Uses localStorage, globalStorage, and userData behavior under the hood

marcuswestin

Popular search queries

urlreact-scriptsreactlottie-apireact-helmet-async+7 packages

color-convert@headlessui/reacthoist-non-react-staticsreactstraplit-html+60 packages

lodashrelay-runtimereact-relayreact-uselodash-es+51 packages

Popular packages

React is a JavaScript library for building user interfaces.

+6 634 websites

Standard library

+10 238 websites

ECMAScript extensions and shims

+10 229 websites

babel's modular runtime helpers

+8 352 websites

Lodash modular utilities.

+4 826 websites

Promise based HTTP client for the browser and node.js

+4 742 websites