List of NPM packages that are used on goop.com - GradeJS

About Community

goop.com 39 packages

Last scanned on Oct 27 at 06:23 PM

lodash 4.17.16VulnerableOutdated

Lodash modular utilities.

Script

https://goop.com/_next/static/chunks/8764aea244c622a0157f9491e5f453c9d6ed3716.fbd39bb6ec9f08c24dd6.js

License

MIT

Footprint

4 KB

Vulnerabilities

HighGHSA-35jh-r3h4-6jhm

Command Injection in lodash

Affected versions >=0 <4.17.21

ModerateGHSA-29mw-wpgm-hmr9

Regular Expression Denial of Service (ReDoS) in lodash

Affected versions >=0 <4.17.21

HighGHSA-p6mc-m468-83gw

Prototype Pollution in lodash

Affected versions >=3.7.0 <4.17.19

Matched Modules

Version distribution in production

3 846

4.17.16

946

4.17.21

337

4.17.20

322

4.17.15

302

4.17.19

301

4.17.13

Also used on 4830 websites

Repository Homepage

modules stdlib util

next 10.0.0 - 11.0.1VulnerableOutdated

The React Framework

sanitize-html 2.5.1VulnerableOutdated

Clean up user-submitted HTML, preserving allowlisted elements and allowlisted attributes on a per-element basis

html parser sanitizer sanitize

+15

postcss 8.3.7VulnerableOutdated

Tool for transforming styles with JS plugins

css postcss rework preprocessor parser+4

ai

escape-string-regexp 4.0.0 - 5.0.0

Escape RegExp special characters

escape regex regexp regular expression+3

sindresorhus

uuid 7.0.0 - 8.0.0Outdated

RFC4122 (v1, v4, and v5) UUIDs

uuid guid rfc4122

isarray 1.0.0 - 2.0.5

Array#isArray for older browsers

browser isarray array

juliangruber

react-is 16.3.0 - 16.13.1Outdated

Brand checking of React Elements.

+1

buffer 4.6.0 - 4.9.2Outdated

Node.js Buffer API, for the browser

arraybuffer browser browserify buffer compatible+2

feross

entities 2.0.3 - 2.1.0Outdated

Encode & decode XML and HTML entities with ease & speed

entity decoding encoding html xml+1

feedic

@babel/runtime 7.9.6 - 7.12.18Outdated

babel's modular runtime helpers

+1

is-plain-object 4.1.0 - 5.0.0

Returns true if an object was created by the `Object` constructor, or Object.create(null).

check is is-object isobject javascript+7

domutils 2.8.0Outdated

Utilities for working with htmlparser2's dom

dom htmlparser2

feedic

base64-js 1.3.0 - 1.5.1

Base64 encoding/decoding in pure JS

dom-serializer 1.0.0 - 1.4.1Outdated

render domhandler DOM nodes to a string

html xml render

feedic

domhandler 4.2.2 - 4.3.1Outdated

Handler for htmlparser2 that turns pages into a dom

dom htmlparser2

feedic

deepmerge 4.2.2Outdated

A library for deep (recursive) merging of Javascript objects

merge deep extend copy clone+1

tehshrike

domelementtype 2.0.0 - 2.3.0

all the types of nodes in htmlparser2's dom

dom element types htmlparser2

feedic

htmlparser2 6.1.0Outdated

Fast & forgiving HTML/XML parser

html parser streams xml dom+3

feedic

scheduler 0.15.0 - 0.23.0

Cooperative scheduler for the browser environment.

+1

prop-types 15.7.0 - 15.7.2Outdated

Runtime type checking for React props and similar objects.

react 16.13.0 - 17.0.2Outdated

React is a JavaScript library for building user interfaces.

+1

hoist-non-react-statics 3.3.1 - 3.3.2

Copies non-react specific statics from a child component to a parent component

mridgway

@emotion/unitless 0.7.2 - 0.8.0Outdated

An object of css properties that don't accept values with units

+1

klona 2.0.0 - 2.0.4Outdated

A tiny (240B to 501B) and fast utility to "deep clone" Objects, Arrays, Dates, RegExps, and more!

clone copy deep extend recursive+1

lukeed

lodash-es 4.17.20 - 4.17.21

Lodash exported as ES modules.

es6 modules stdlib util

crypto-browserify 1.0.9 - 2.0.0Outdated

implementation of crypto for the browser

+2

querystring-es3 0.2.1

Node's querystring module for all engines. (ES3 compat fork)

commonjs query querystring

spaintrain

shallowequal 1.0.1 - 1.1.0

Like lodash isEqualWith but for shallow equal.

shallowequal shallow equal isequal compare+1

dashed

styled-components 5.2.0 - 5.3.6Outdated

CSS for the <Component> Age. Style components your way with speed, strong typing, and flexibility.

react css css-in-js styled-components styling

+1

@emotion/stylis 0.8.1Outdated

A custom build of Stylis

+1

web-vitals 3.0.0 - 3.0.4Outdated

Easily measure performance metrics in JavaScript

crux performance metrics Core Web Vitals CLS+5

@reduxjs/toolkit 1.3.4 - 1.8.6Outdated

The official, opinionated, batteries-included toolset for efficient Redux development

redux react starter toolkit reducer+4

+2

is-in-browser 1.0.2 - 1.1.2Outdated

Simple check to see if current app is running in browser

tuxsudo

parse-srcset 1.0.0 - 1.0.2

A spec-conformant JavaScript parser for the HTML5 srcset attribute

albell

react-intersection-observer 8.30.3 - 8.31.0Outdated

Monitor if a component is inside the viewport, using IntersectionObserver API

react component hooks viewport intersection+5

thebuilder

@datadog/browser-rum 3.0.1 - 3.7.0Outdated

Datadog Real User Monitoring (RUM) enables you to visualize and analyze the real-time performance and user journeys of your application's individual users.

datadog

use-subscription 1.3.0 - 1.5.1Outdated

Reusable hooks

+1

react-amphtml 3.0.0 - 3.0.1Outdated

Use amphtml components inside your React apps easily!

dfrankland

Popular search queries

urlreact-scriptsreactlottie-apireact-helmet-async+7 packages

color-convert@headlessui/reacthoist-non-react-staticsreactstraplit-html+60 packages

lodashrelay-runtimereact-relayreact-uselodash-es+51 packages

Popular packages

React is a JavaScript library for building user interfaces.

+6 634 websites

Standard library

+10 238 websites

ECMAScript extensions and shims

+10 229 websites

babel's modular runtime helpers

+8 352 websites

Lodash modular utilities.

+4 826 websites

Promise based HTTP client for the browser and node.js

+4 742 websites