globalcitizen.org 102 packages

Last scanned on Oct 27 at 06:14 PM
lodash 4.17.16VulnerableOutdated
Lodash modular utilities.
License
MIT
Footprint
3 KB
Vulnerabilities
Prototype Pollution in lodash
Affected versions >=0 <4.17.20
Command Injection in lodash
Affected versions >=0 <4.17.21
Regular Expression Denial of Service (ReDoS) in lodash
Affected versions >=0 <4.17.21
Matched Modules
Version distribution in production
3 846
4.17.16
946
4.17.21
337
4.17.20
322
4.17.15
302
4.17.19
301
4.17.13
ua-parser-js 0.7.22VulnerableOutdated
Detect Browser, Engine, OS, CPU, and Device type/model from User-Agent data. Supports browser & node.js environment
markdown-it 2.0.0 - 2.1.0VulnerableOutdated
Markdown-it - modern pluggable markdown parser.
moment-timezone 0.5.33VulnerableOutdated
Parse and display moments in any timezone.
i18next 2.2.0 - 2.3.3VulnerableOutdated
i18next internationalization framework
tslib 1.9.2 - 2.4.0Outdated
Runtime library for TypeScript helper functions
debug 2.3.1 - 3.1.0Outdated
Lightweight debugging utility for Node.js and the browser
ms 2.0.0Outdated
Tiny millisecond conversion utility
+4
gdborton
rauchg
matt.straka
react-is 16.3.0 - 17.0.2Outdated
Brand checking of React Elements.
inherits 2.0.3 - 2.0.4
Browser-friendly inheritance fully compatible with standard node.js inherits()
form-data 1.0.0 - 4.0.0
A library to create readable "multipart/form-data" streams. Can be used to submit forms and file uploads to other web applications.
+2
mikeal
niftylettuce
alexindigo
@babel/runtime 7.13.6 - 7.13.7Outdated
babel's modular runtime helpers
+1
hzoo
existentialism
nicolo-ribaudo
axios 0.21.4Outdated
Promise based HTTP client for the browser and node.js
get-intrinsic 1.0.0 - 1.0.1Outdated
Get and robustly cache all JS language-level intrinsics at first require time
has-symbols 1.0.0 - 1.0.1Outdated
Determine if the JS environment has Symbol support. Supports spec, or shams.
object-inspect 1.8.0Outdated
string representations of objects in node and the browser
has 1.0.1 - 1.0.3
Object.prototype.hasOwnProperty.call shortcut
tarruda
ljharb
function-bind 1.1.0 - 1.1.1
Implementation of Function.prototype.bind
define-properties 1.1.3 - 1.1.4Outdated
Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.
core-js 2.6.11Outdated
Standard library
es-abstract 1.17.7Outdated
ECMAScript spec abstract operations.
is-callable 1.2.0 - 1.2.2Outdated
Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.
side-channel 1.0.1 - 1.0.3Outdated
Store information about any JS value in a side channel. Uses WeakMap if available.
util 0.10.0 - 0.12.5
Node.js's util module for all engines
object-keys 1.1.0 - 1.1.1
An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim
is-regex 1.1.1Outdated
Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag
regexp.prototype.flags 1.2.0 - 1.3.2Outdated
ES6 spec-compliant RegExp.prototype.flags shim.
is-date-object 1.0.1 - 1.0.3Outdated
Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
internal-slot 1.0.1 - 1.0.3Outdated
ES spec-like internal slots
es-to-primitive 1.2.0 - 1.2.1
ECMAScript “ToPrimitive” algorithm. Provides ES5 and ES2015 versions.
eventemitter3 2.0.0 - 4.0.7Outdated
EventEmitter3 focuses on performance while maintaining a Node.js AND browser compatible interface.
prop-types 15.7.0 - 15.7.2Outdated
Runtime type checking for React props and similar objects.
scheduler 0.15.0 - 0.23.0
Cooperative scheduler for the browser environment.
performance-now 0.1.3 - 2.1.0
Implements performance.now (based on process.hrtime).
meryn
meryn
react 16.13.0 - 18.2.0
React is a JavaScript library for building user interfaces.
lodash.debounce 4.0.8
The lodash method `_.debounce` exported as a module.
react-dom 18.0.0 - 18.2.0
React package for working with the DOM.
is-windows 0.1.0 - 0.2.0Outdated
Returns true if the platform is windows. UMD module, works with node.js, commonjs, browser, AMD, electron, etc.
hoist-non-react-statics 3.3.1 - 3.3.2
Copies non-react specific statics from a child component to a parent component
mridgway
mridgway
string.prototype.matchall 4.0.2 - 4.0.5Outdated
Spec-compliant polyfill for String.prototype.matchAll
@emotion/unitless 0.7.2 - 0.8.0Outdated
An object of css properties that don't accept values with units
+1
emmatown
tkh44
emotion-release-bot
classnames 2.2.6Outdated
A simple utility for conditionally joining classNames together
object.getownpropertydescriptors 2.0.0 - 2.1.4Outdated
ES2017 spec-compliant shim for `Object.getOwnPropertyDescriptors` that works in ES5.
jsonc-parser 2.3.1 - 3.2.0
Scanner and parser for JSON with comments.
+4
alexandrudima
joaomoreno.ms
kaimaetzel
@emotion/serialize 0.11.12 - 0.11.16Outdated
serialization utils for emotion
+1
emmatown
tkh44
emotion-release-bot
@emotion/sheet 0.9.1 - 0.9.4Outdated
emotion's stylesheet
+1
emmatown
tkh44
emotion-release-bot
graphql 16.1.0 - 16.6.0Outdated
A Query Language and Runtime which can target any service.
memoize-one 5.1.0 - 5.1.1Outdated
A memoization library which only remembers the latest invocation
is-promise 2.1.0 - 4.0.0
Test whether an object looks like a promises-a+ promise
forbeslindesay
then-bot
lodash-es 4.17.21
Lodash exported as ES modules.
shallowequal 1.0.1 - 1.1.0
Like lodash isEqualWith but for shallow equal.
react-lifecycles-compat 3.0.4
Backwards compatibility polyfill for React class components
fb
sophiebits
js-cookie 1.5.0 - 3.0.1Outdated
A simple, lightweight JavaScript API for handling cookies
raf 1.0.0 - 3.4.1
requestAnimationFrame polyfill for node and the browser
@emotion/stylis 0.8.1Outdated
A custom build of Stylis
+1
emmatown
tkh44
emotion-release-bot
react-select 3.1.0 - 4.3.1Outdated
A Select control built with and for ReactJS
polished 1.0.0 - 1.9.3Outdated
A lightweight toolset for writing styles in Javascript.
unfetch 2.0.0 - 2.0.1Outdated
Bare minimum fetch polyfill in 500 bytes
graphql-tag 2.12.2 - 2.12.6
A JavaScript template literal tag that parses GraphQL queries
jnwng
abernix
apollo-bot
p-is-promise 3.0.0 - 4.0.0
Check if something is a promise
resize-observer-polyfill 1.5.0 - 1.5.1
A polyfill for the Resize Observer API
zen-observable-ts 1.2.4 - 1.2.5Outdated
Thin wrapper around zen-observable and @types/zen-observable, to support ESM exports as well as CommonJS exports
jbaxleyiii
apollo-bot
@wry/equality 0.5.1 - 0.5.2Outdated
Structural equality checking for JavaScript values
benjamn
benjamn
@emotion/core 10.0.17 - 10.3.1Outdated
+1
emmatown
tkh44
emotion-release-bot
@wry/context 0.4.0 - 0.6.1Outdated
Manage contextual information needed by (a)synchronous tasks without explicitly passing objects around
benjamn
benjamn
react-input-autosize 2.2.2Outdated
Auto-resizing Input Component for React
optimism 0.16.1Outdated
Composable reactive caching with efficient invalidation.
@wry/trie 0.2.1 - 0.3.2Outdated
https://en.wikipedia.org/wiki/Trie
dset 3.0.0 - 3.1.2
A tiny (194B) utility for safely writing deep Object values~!
@apollo/client 3.6.5 - 3.6.10Outdated
A fully-featured caching GraphQL client.
attr-accept 2.2.2
JavaScript implementation of the "accept" attribute for HTML5 <input type="file">
exenv 1.1.0 - 1.2.2
React's ExecutionEnvironment module extracted for use in other packages & components
d3 3.5.17Outdated
Data-Driven Documents
react-bootstrap 0.32.0 - 0.33.1Outdated
Bootstrap 5 components built with React
fp-ts 0.2.1 - 0.2.9Outdated
Functional programming in TypeScript
json2mq 0.2.0
Generate media query string from JSON or javascript object
akiran
akiran
string-convert 0.2.0 - 0.2.1
String convertions
akiran
akiran
@datadog/browser-core 1.5.0 - 1.9.2Outdated
Datadog browser core utilities.
datadog
datadog
react-modal 3.4.1 - 3.11.2Outdated
Accessible modal dialog component for React.JS
xstate 4.5.0Outdated
Finite State Machines and Statecharts for the Modern Web.
recharts 2.0.0Outdated
React charts
antd 3.26.14 - 4.1.0Outdated
An enterprise-class UI design language and React components implementation
load-script 1.0.0 - 2.0.0
Dynamic script loading for browser
enquire.js 2.1.6
Awesome Media Queries in JavaScript
mapbox-gl 0.22.0 - 0.33.1Outdated
A WebGL interactive maps library
+25
mbx-npm-ci-production
mbx-npm-ci-staging
mbx-npm-advanced-actions-production
react-slick 0.29.0
React port of slick carousel
body-scroll-lock 2.7.0 - 3.1.5Outdated
Enables body scroll locking (for iOS Mobile and Tablet, Android, desktop Safari/Chrome/Firefox) without breaking scrolling of a target element (eg. modal/lightbox/flyouts/nav-menus)
flux 2.1.0 - 3.1.3Outdated
An application architecture based on a unidirectional data flow
rollbar 0.2.0 - 0.6.6Outdated
Effortlessly track and debug errors in your JavaScript applications with Rollbar. This package includes advanced error tracking features and an intuitive interface to help you identify and fix issues more quickly.
react-ga 3.0.0 - 3.3.0Outdated
React Google Analytics Module
sister 3.0.1 - 3.0.2
Event manager.
gajus
gajus
intl-tel-input 14.0.0 - 16.0.15Outdated
A JavaScript plugin for entering and validating international telephone numbers
react-feather 2.0.8 - 2.0.10
React component for Feather icons
react_ujs 0.2.0 - 1.0.0Outdated
Rails UJS for the react-rails gem
shakacode
bookofgreg
rmosolgo
instantsearch.js 3.1.0 - 3.7.0Outdated
InstantSearch.js is a JavaScript library for building performant and instant search experiences with Algolia.
react-countdown 2.3.2 - 2.3.3Outdated
A customizable countdown component for React.
react-flip-move 3.0.4Outdated
Effortless animation between DOM changes (eg. list reordering) using the FLIP technique.
dialog-polyfill 0.4.4 - 0.4.5Outdated
Polyfill for the dialog element
samthor
google-wombot
chartist 1.0.0 - 1.2.1Outdated
Simple, responsive charts
react-stickynode 3.0.3 - 3.1.1Outdated
A performant and comprehensive React sticky component
@tannin/plural-forms 1.0.0 - 1.1.0
Compiles a function to compute the plural forms index for a given value
aduth
aduth
scrollmonitor 1.0.10 - 1.0.12Outdated
A simple and fast API to monitor DOM elements as you scroll
sakabako
sakabako