goldbelly.com 98 packages

Last scanned on Jan 19 at 09:21 AM
lodash.merge 3.3.0 - 3.3.2VulnerableOutdated
The Lodash method `_.merge` exported as a module.
License
MIT
Footprint
1 KB
Vulnerabilities
Prototype Pollution in lodash
Affected versions >=0 <4.6.2
Prototype Pollution in lodash.merge
Affected versions >=0 <4.6.1
Prototype Pollution in lodash.merge
Affected versions >=0 <4.6.2
Matched Modules
Version distribution in production
271
4.6.2
235
4.6.1
47
3.3.2
46
3.3.0
46
3.3.1
1
4.5.0
crypto-js 4.1.0 - 4.1.1VulnerableOutdated
JavaScript library of crypto standards.
lodash 4.17.16VulnerableOutdated
Lodash modular utilities.
tesseract.js 1.0.2 - 1.0.3VulnerableOutdated
Pure Javascript Multilingual OCR
+1
antimatter15
jeromewu
bijection
es5-ext 0.10.24 - 0.10.49VulnerableOutdated
ECMAScript extensions and shims
sweetalert2 10.15.4 - 11.4.18VulnerableOutdated
A beautiful, responsive, customizable and accessible (WAI-ARIA) replacement for JavaScript's popup boxes, supported fork of sweetalert
uuid 8.3.0 - 9.0.0Outdated
RFC4122 (v1, v4, and v5) UUIDs
react-is 16.3.0 - 16.13.1Outdated
Brand checking of React Elements.
camelcase 5.3.1Outdated
Convert a dash/dot/underscore/space separated string to camelCase or PascalCase: `foo-bar` → `fooBar`
@babel/runtime 7.13.6 - 7.13.7Outdated
babel's modular runtime helpers
+1
hzoo
existentialism
nicolo-ribaudo
get-intrinsic 1.1.3Outdated
Get and robustly cache all JS language-level intrinsics at first require time
function-bind 1.1.0 - 1.1.1Outdated
Implementation of Function.prototype.bind
path-to-regexp 6.0.0 - 6.2.0Outdated
Express style path to RegExp utility
axios 0.19.1 - 1.2.3Outdated
Promise based HTTP client for the browser and node.js
call-bind 1.0.2Outdated
Robustly `.call.bind()` a function
object-inspect 1.12.2 - 1.12.3Outdated
string representations of objects in node and the browser
fast-deep-equal 3.0.0 - 3.1.3
Fast deep equal
has-symbols 1.0.2 - 1.0.3
Determine if the JS environment has Symbol support. Supports spec, or shams.
has-property-descriptors 1.0.0Outdated
Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD.
es-abstract 1.20.0 - 1.20.2Outdated
ECMAScript spec abstract operations.
define-properties 1.1.4Outdated
Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.
is-callable 1.2.6Outdated
Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.
has-tostringtag 1.0.0Outdated
Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.
object-keys 1.1.0 - 1.1.1
An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim
regexp.prototype.flags 1.4.2 - 1.4.3Outdated
ES6 spec-compliant RegExp.prototype.flags shim.
deepmerge 1.5.2Outdated
A library for deep (recursive) merging of Javascript objects
core-js 3.16.0 - 3.17.3Outdated
Standard library
is-regex 1.1.4
Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag
is-date-object 1.0.1 - 1.0.3Outdated
Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
es-to-primitive 1.2.0 - 1.2.1
ECMAScript “ToPrimitive” algorithm. Provides ES5 and ES2015 versions.
function.prototype.name 1.1.2 - 1.1.5Outdated
An ES2015 spec-compliant `Function.prototype.name` shim
functions-have-names 1.1.1 - 1.2.3
Does this JS environment support the `name` property on functions?
object.values 1.0.0 - 1.1.6Outdated
ES2017 spec-compliant Object.values shim.
scheduler 0.15.0 - 0.23.0Outdated
Cooperative scheduler for the browser environment.
has 1.0.1 - 1.0.3Outdated
Object.prototype.hasOwnProperty.call shortcut
tarruda
tarruda
map-obj 4.2.1Outdated
Map object keys and values into a new object
sindresorhus
sindresorhus
array.prototype.flat 1.2.2 - 1.2.5Outdated
An ES2019 spec-compliant `Array.prototype.flat` shim/polyfill/replacement that works as far down as ES3.
is-arguments 1.0.4Outdated
Is this an arguments object? It's a harder question than you think.
react 16.13.0 - 17.0.2Outdated
React is a JavaScript library for building user interfaces.
react-dom 16.13.0 - 16.14.0Outdated
React package for working with the DOM.
quick-lru 4.0.1Outdated
Simple “Least Recently Used” (LRU) cache
querystringify 2.2.0
Querystringify - Small, simple but powerful query string parser.
lodash.debounce 4.0.8
The lodash method `_.debounce` exported as a module.
performance-now 0.1.3 - 2.1.0
Implements performance.now (based on process.hrtime).
meryn
meryn
deep-equal 1.1.0 - 1.1.1Outdated
node's assert.deepEqual algorithm
date-fns 2.16.1 - 2.18.0Outdated
Modern JavaScript date utility library
kossnocorp
kossnocorp
object-is 1.1.0 - 1.1.5Outdated
ES2015-compliant shim for Object.is - differentiates between -0 and +0
hoist-non-react-statics 3.3.1 - 3.3.2
Copies non-react specific statics from a child component to a parent component
mridgway
mridgway
camelcase-keys 6.2.2 - 7.0.1Outdated
Convert object keys to camel case
sindresorhus
sindresorhus
classnames 1.1.1 - 2.3.1Outdated
A simple utility for conditionally joining classNames together
query-string 6.5.0 - 7.1.3Outdated
Parse and stringify URL query strings
is-promise 2.1.0 - 4.0.0
Test whether an object looks like a promises-a+ promise
forbeslindesay
then-bot
lodash-es 4.17.20 - 4.17.21
Lodash exported as ES modules.
redux 4.0.5Outdated
Predictable state container for JavaScript apps
react-fast-compare 2.0.4Outdated
Fastest deep equal comparison for React. Great for React.memo & shouldComponentUpdate. Also really fast general-purpose deep comparison.
es6-promise 3.3.0 - 3.3.1Outdated
A lightweight library that provides tools for organizing asynchronous code
superagent 3.8.0 - 8.0.8Outdated
elegant & feature rich browser / node HTTP with a fluent API
reselect 4.0.0Outdated
Selectors for Redux.
shallowequal 1.0.1 - 1.1.0
Like lodash isEqualWith but for shallow equal.
raf 3.0.0 - 3.1.0Outdated
requestAnimationFrame polyfill for node and the browser
react-lifecycles-compat 3.0.4
Backwards compatibility polyfill for React class components
fb
sophiebits
split-on-first 1.0.0 - 1.1.0Outdated
Split a string on the first occurance of a given separator
unquote 1.1.0 - 1.1.1
Remove wrapping quotes from a string.
redux-thunk 2.1.0 - 2.4.2Outdated
Thunk middleware for Redux.
js-base64 2.5.2Outdated
Yet another Base64 transcoder in pure-JS
dankogai
dankogai
react-popper 1.3.1 - 2.3.0
Official library to use Popper on React projects
popper.js 1.12.6 - 1.16.1
A kickass library to manage your poppers
framer-motion 6.5.0 - 8.5.0Outdated
A simple and powerful JavaScript animation library
enzyme-shallow-equal 1.0.4Outdated
Adaptation of react-addons-shallow-compare, for independent usage
swr 0.2.3 - 0.5.7Outdated
React Hooks library for remote data fetching
gud 1.0.0
Create a 'gud nuff' (not cryptographically secure) globally unique id
react-beautiful-dnd 1.0.0 - 6.0.2Outdated
Beautiful and accessible drag and drop for lists with React
airbnb-prop-types 2.16.0
Custom React PropType validators that we use at Airbnb.
@stripe/react-stripe-js 1.14.0 - 1.16.4Outdated
React components for Stripe.js and Stripe Elements
@fortawesome/react-fontawesome 0.2.0
Official React component for Font Awesome 5
+4
jasonlundien
devoto13
jrjohnson
consolidated-events 1.0.0 - 1.1.1Outdated
Manage multiple event handlers using few event listeners
redux-devtools-extension 2.12.2Outdated
Wrappers for Redux DevTools Extension.
+1
jhen0409
methuselah96
timdorr
@fortawesome/free-regular-svg-icons 6.0.0 - 6.2.1Outdated
The iconic font, CSS, and SVG framework
@reach/router 1.3.1 - 1.3.4
Next generation Routing for React.
@fortawesome/free-brands-svg-icons 5.1.0 - 6.2.1Outdated
The iconic font, CSS, and SVG framework
document.contains 1.0.1Outdated
Polyfill/shim for `document.contains`
react-outside-click-handler 1.3.0
A React component for dealing with clicks outside its subtree
+2
brieb
airbnbeng
lencioni
react-with-direction 1.0.0 - 1.4.0
Components to provide and consume RTL or LTR direction in React
+4
brieb
airbnbeng
lencioni
react-with-styles 4.1.0Outdated
[![Build Status][travis-svg]][travis-url] [![dependency status][deps-svg]][deps-url] [![dev dependency status][dev-deps-svg]][dev-deps-url] [![License][license-image]][license-url] [![Downloads][downloads-image]][downloads-url]
react-moment-proptypes 1.6.0 - 1.8.1
React proptype for moment module
react-dates 21.8.0
A responsive and accessible date range picker component built with React
+4
lencioni
ljharb
ahuth
global-cache 1.2.0 - 1.2.1
Sometimes you have to do horrible things, like use the global object to share a singleton. Abstract that away, with this!
react-with-styles-interface-css 6.0.0
Interface for react-with-styles outputting CSS
redux-form 8.3.4 - 8.3.9Outdated
A higher order component decorator for forms using Redux and React
use-query-params 2.0.0 - 2.1.2Outdated
React Hook for managing state in URL query parameters with easy serialization.
amplitude-js 5.2.0Outdated
Javascript library for Amplitude Analytics
analytics-utils 0.0.14 - 0.1.1Outdated
Analytics utility functions used by 'analytics' module
deepcopy 2.0.0 - 2.1.0
deep copy data
sasaplus1
sasaplus1
wretch 0.2.2Outdated
A tiny wrapper built around fetch with an intuitive syntax.
tiny-slider 2.8.8Outdated
Vanilla javascript slider for all purposes, inspired by Owl Carousel.
ganlanyuan
ganlanyuan
react-imgix 8.6.4 - 9.0.3Outdated
React Component for displaying an image from Imgix
lottie-api 1.0.0 - 1.0.2Outdated
A library to edit lottie-web animations dynamically
airnan
airnan
tg-core-redux 0.0.2 - 0.0.4Outdated
tg-core-redux
+4
albinadolfsson
codebetniklas
sebost