gopuff.com 99 packages

Last scanned on Jan 19 at 10:18 AM
lodash 4.17.16VulnerableOutdated
Lodash modular utilities.
License
MIT
Footprint
4 KB
Vulnerabilities
Command Injection in lodash
Affected versions >=0 <4.17.21
Regular Expression Denial of Service (ReDoS) in lodash
Affected versions >=0 <4.17.21
Prototype Pollution in lodash
Affected versions >=3.7.0 <4.17.19
Matched Modules
Version distribution in production
3 846
4.17.16
946
4.17.21
337
4.17.20
322
4.17.15
302
4.17.19
301
4.17.13
color-convert 1.9.1 - 1.9.3Outdated
Plain color conversion functions
escape-string-regexp 4.0.0 - 5.0.0
Escape RegExp special characters
uuid 7.0.0 - 8.0.0Outdated
RFC4122 (v1, v4, and v5) UUIDs
ajv 6.12.5 - 6.12.6Outdated
Another JSON Schema Validator
react-is 16.3.0 - 16.13.1Outdated
Brand checking of React Elements.
json-schema-traverse 0.4.0 - 1.0.0
Traverse JSON Schema passing each schema object to callback
punycode 2.1.1 - 2.2.0Outdated
A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.
qs 6.9.1 - 6.10.5Outdated
A querystring parser that supports nesting and arrays, with a depth limit
buffer 5.7.0 - 6.0.3
Node.js Buffer API, for the browser
@babel/runtime 7.18.2 - 7.20.1Outdated
babel's modular runtime helpers
+1
hzoo
existentialism
nicolo-ribaudo
get-intrinsic 1.1.0 - 1.1.1Outdated
Get and robustly cache all JS language-level intrinsics at first require time
function-bind 1.1.0 - 1.1.1Outdated
Implementation of Function.prototype.bind
is-arrayish 0.3.1 - 0.3.2
Determines if an object can be used as an array
call-bind 1.0.2Outdated
Robustly `.call.bind()` a function
object-inspect 1.12.0Outdated
string representations of objects in node and the browser
fast-deep-equal 3.0.0 - 3.1.3
Fast deep equal
has-symbols 1.0.2 - 1.0.3
Determine if the JS environment has Symbol support. Supports spec, or shams.
is-plain-obj 1.1.0Outdated
Check if a value is a plain object
sindresorhus
sindresorhus
side-channel 1.0.4Outdated
Store information about any JS value in a side channel. Uses WeakMap if available.
base64-js 1.3.0 - 1.5.1
Base64 encoding/decoding in pure JS
fast-json-stable-stringify 2.0.0 - 2.1.0
deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify without jsonify
lodash.merge 4.6.1 - 4.6.2
The Lodash method `_.merge` exported as a module.
normalize-url 2.0.1Outdated
Normalize a URL
requires-port 1.0.0
Check if a protocol requires a certain port number to be added to an URL.
scheduler 0.21.0 - 0.23.0Outdated
Cooperative scheduler for the browser environment.
has 1.0.1 - 1.0.3Outdated
Object.prototype.hasOwnProperty.call shortcut
tarruda
tarruda
prop-types 15.8.0 - 15.8.1
Runtime type checking for React props and similar objects.
react 17.0.0 - 18.2.0Outdated
React is a JavaScript library for building user interfaces.
react-dom 18.2.0Outdated
React package for working with the DOM.
url-parse 1.5.9 - 1.5.10
Small footprint URL parser that works seamlessly across Node.js and browser environments
querystringify 2.2.0
Querystringify - Small, simple but powerful query string parser.
url 0.11.0Outdated
The core `url` packaged standalone for use with Browserify.
color 3.1.0 - 3.2.1Outdated
Color conversion and manipulation with CSS string support
color-string 1.5.3 - 1.9.1
Parser and generator for CSS color strings
hoist-non-react-statics 3.3.1 - 3.3.2
Copies non-react specific statics from a child component to a parent component
mridgway
mridgway
querystring 0.2.0Outdated
Node's querystring module for all engines.
simple-swizzle 0.2.1 - 0.2.2
Simply swizzle your arguments
path-browserify 1.0.0 - 1.0.1
the path module from node core for browsers
query-string 5.0.1 - 7.1.3Outdated
Parse and stringify URL query strings
graphql 15.4.0 - 15.8.0Outdated
A Query Language and Runtime which can target any service.
whatwg-fetch 3.3.0 - 3.3.1Outdated
A window.fetch polyfill.
jakechampion
mattandrews
mislav
lodash.isequal 4.5.0
The Lodash method `_.isEqual` exported as a module.
sort-keys 2.0.0Outdated
Sort the keys of an object
@floating-ui/core 0.3.0 - 1.1.0Outdated
Positioning library for floating elements: tooltips, popovers, dropdowns, and more
memoize-one 6.0.0
A memoization library which only remembers the latest invocation
prepend-http 2.0.0Outdated
Prepend `https://` to humanized URLs like sindresorhus.com and localhost
stable 0.1.8
A stable array sort for JavaScript
lodash-es 4.17.20 - 4.17.21
Lodash exported as ES modules.
react-fast-compare 3.1.0 - 3.2.0Outdated
Fastest deep equal comparison for React. Great for React.memo & shouldComponentUpdate. Also really fast general-purpose deep comparison.
crypto-browserify 1.0.9 - 2.0.0Outdated
implementation of crypto for the browser
+2
dcousens
ljharb
cwmma
filter-obj 1.1.0Outdated
Filter object keys and values into a new object
shallowequal 1.0.1 - 1.1.0
Like lodash isEqualWith but for shallow equal.
void-elements 3.1.0
Array of "void elements" defined by the HTML specification.
graphql-tag 2.12.6
A JavaScript template literal tag that parses GraphQL queries
jnwng
abernix
apollo-bot
split-on-first 1.0.0 - 1.1.0Outdated
Split a string on the first occurance of a given separator
toposort 2.0.2
Topological sort of directed ascyclic graphs (like dependecy lists)
shimmer 1.2.1
Safe(r) monkeypatching for JavaScript.
i18next 21.5.0 - 22.4.9Outdated
i18next internationalization framework
property-expr 2.0.4Outdated
tiny util for getting and setting deep object props safely
extract-files 10.0.0Outdated
A function to recursively extract files and their object paths within a value, replacing them with null in a deep clone without mutating the original value. FileList instances are treated as File instance arrays. Files are typically File and Blob instance
hyphenate-style-name 1.0.3 - 1.0.4
Hyphenates a camelcased CSS property name
compare-versions 3.6.0Outdated
Compare semver version strings to find greater, equal or lesser.
react-i18next 11.18.4 - 12.1.4Outdated
Internationalization for react done right. Using the i18next i18n ecosystem.
@apollo/client 3.3.17 - 3.7.4Outdated
A fully-featured caching GraphQL client.
react-scripts 0.4.2Outdated
Configuration and scripts for Create React App.
+1
fb
timer
iansu
attr-accept 2.2.2
JavaScript implementation of the "accept" attribute for HTML5 <input type="file">
inline-style-prefixer 5.0.4 - 6.0.1Outdated
Run-time Autoprefixer for JavaScript style objects
lolex 2.1.3 - 5.1.1Outdated
Fake JavaScript timers
+1
cjohansen
fatso83
mantoni
jss 5.5.4 - 5.5.6Outdated
A lib for generating Style Sheets with JavaScript.
fp-ts 1.18.2 - 2.9.5Outdated
Functional programming in TypeScript
swiper 6.5.1 - 8.4.6Outdated
Most modern mobile touch slider and framework with hardware accelerated transitions
dijkstrajs 1.0.1 - 1.0.2Outdated
A simple JavaScript implementation of Dijkstra's single-source shortest-paths algorithm.
qrcode 1.5.0Outdated
QRCode / 2d Barcode api with both server side and client side support using canvas
@datadog/browser-core 4.9.0Outdated
Datadog browser core utilities.
datadog
datadog
create-react-class 15.7.0
Legacy API for creating React components.
react-helmet-async 1.1.0 - 1.3.0Outdated
Thread-safe Helmet for React 16+ and friends
wonderboymusic
wonderboymusic
xstate 4.7.0 - 4.19.1Outdated
Finite State Machines and Statecharts for the Modern Web.
rc-trigger 4.3.0 - 4.3.4Outdated
base abstract trigger component for react
fbemitter 3.0.0
Facebook's EventEmitter is a simple emitter implementation that prioritizes speed and simplicity. It is conceptually similar to other emitters like Node's EventEmitter, but the precise APIs differ. More complex abstractions like the event systems used on
ssr-window 3.0.0Outdated
Better handling for window object in SSR environment
nolimits4web
nolimits4web
wonka 4.0.13 - 4.0.15Outdated
A tiny but capable push & pull stream library for TypeScript and Flow
deep-freeze 0.0.1
recursively Object.freeze() objects and functions
nopersonsmodules
nopersonsmodules
@contentful/rich-text-types 15.9.1 - 16.0.2Outdated
Type definitions and constants for the Contentful rich text field type.
+1
michaelpearce
it-internal
whydah-gally
dom7 3.0.0 - 4.0.4Outdated
Minimalistic JavaScript library for DOM manipulation, with a jQuery-compatible API
react-spring 2.0.0 - 5.3.0Outdated
<p align="center"> <img src="https://i.imgur.com/QZownhg.png" width="240" /> </p>
@auth0/auth0-spa-js 2.0.0 - 2.0.2Outdated
Auth0 SDK for Single Page Applications using Authorization Code Grant Flow with PKCE
fontfaceobserver 1.6.0 - 2.1.0Outdated
Detect if web fonts are available
@chakra-ui/theme 2.1.0 - 2.1.3Outdated
The default theme for chakra components
credit-card-type 9.1.0Outdated
A library for determining credit card type
braintree
braintree
isbot 3.4.8 - 3.5.0Outdated
🤖/👨‍🦰 Recognise bots/crawlers/spiders using the user agent string.
react-native-web 0.18.7 - 0.18.10Outdated
React Native for Web
@contentful/rich-text-react-renderer 15.11.0 - 15.12.1Outdated
React renderer for the Contentful rich text field type.
+1
michaelpearce
it-internal
whydah-gally
bootstrap-vue 2.0.0 - 2.15.0Outdated
With more than 85 components, over 45 available plugins, several directives, and 1000+ icons, BootstrapVue provides one of the most comprehensive implementations of the Bootstrap v4 component and grid system available for Vue.js v2.6, complete with extens
normalize-css-color 1.0.1 - 1.0.2
Normalize a subset of CSS color values into integers
intelligibabble
intelligibabble
amplitude-js 5.2.0Outdated
Javascript library for Amplitude Analytics
@tannin/plural-forms 1.0.0 - 1.1.0
Compiles a function to compute the plural forms index for a given value
aduth
aduth
lottie-api 1.0.0 - 1.0.2Outdated
A library to edit lottie-web animations dynamically
airnan
airnan
gatsby-background-image 0.8.16 - 1.6.0
Lazy-loading React background-image component with optional support for the blur-up effect.