About
Community
hbo.com
67 packages
Last scanned on Oct 27 at 05:59 PM
Update
Name
Size
Popularity
Severity
crypto-js
3.1.8 - 4.1.1
Vulnerable
Outdated
JavaScript library of crypto standards.
Script
https://hbo.com/_next/static/chunks/pages/_app-e338477c411d3c09.js
License
MIT
Footprint
8 KB
Vulnerabilities
Critical
GHSA-xwcq-pm8m-c4vf
crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard
Affected versions >=0 <4.2.0
Matched Modules
Version distribution in production
457
4.1.0
457
4.1.1
185
3.3.0
162
3.1.8
143
3.2.1
143
4.0.0
Also used on 738 websites
pubmatic.com
4 packages
tiktok.com
91 packages
redd.it
180 packages
www.reddit.com
183 packages
Repository
Homepage
More
security
crypto
Hash
MD5
SHA1
+15
evanvosberg
moment
2.19.0 - 2.25.1
Vulnerable
Outdated
Parse, validate, manipulate, and display dates
moment
date
time
parse
format
+4
+2
next
12.1.0 - 12.1.5
Vulnerable
Outdated
The React Framework
tslib
1.6.0 - 2.4.0
Outdated
Runtime library for TypeScript helper functions
TypeScript
Microsoft
compiler
language
javascript
+2
+5
readable-stream
3.6.0
Outdated
Node.js Streams, a user-land copy of the stream library from Node.js
readable
stream
pipe
string_decoder
1.1.0 - 1.3.0
The string_decoder module from Node core
string
decoder
browser
browserify
+1
uuid
8.3.0 - 9.0.0
Outdated
RFC4122 (v1, v4, and v5) UUIDs
uuid
guid
rfc4122
react-is
16.3.0 - 16.13.1
Outdated
Brand checking of React Elements.
react
+1
inherits
2.0.3 - 2.0.4
Browser-friendly inheritance fully compatible with standard node.js inherits()
inheritance
class
klass
oop
object-oriented
+3
isaacs
buffer
5.5.0 - 5.6.1
Outdated
Node.js Buffer API, for the browser
arraybuffer
browser
browserify
buffer
compatible
+2
feross
@babel/runtime
7.18.0 - 7.20.0
Outdated
babel's modular runtime helpers
+1
get-intrinsic
1.1.0 - 1.1.1
Outdated
Get and robustly cache all JS language-level intrinsics at first require time
javascript
ecmascript
es
js
intrinsic
+2
ljharb
function-bind
1.1.0 - 1.1.1
Outdated
Implementation of Function.prototype.bind
function
bind
shim
es5
path-to-regexp
6.1.0 - 6.2.0
Outdated
Express style path to RegExp utility
express
regexp
route
routing
+2
call-bind
1.0.2
Outdated
Robustly `.call.bind()` a function
javascript
ecmascript
es
js
callbind
+8
ljharb
has-symbols
1.0.2 - 1.0.3
Determine if the JS environment has Symbol support. Supports spec, or shams.
Symbol
symbols
typeof
sham
polyfill
+3
ljharb
has-property-descriptors
1.0.0
Outdated
Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD.
property
descriptors
has
environment
env
+2
ljharb
base64-js
1.3.0 - 1.5.1
Base64 encoding/decoding in pure JS
base64
define-properties
1.1.4
Outdated
Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.
Object.defineProperty
Object.defineProperties
object
property descriptor
descriptor
+2
ljharb
has-tostringtag
1.0.0
Outdated
Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.
javascript
ecmascript
symbol
symbols
tostringtag
+1
ljharb
events
3.0.0 - 3.3.0
Node's event emitter for all engines.
events
eventEmitter
eventDispatcher
listeners
object-keys
1.1.0 - 1.1.1
An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim
Object.keys
keys
ES5
shim
ljharb
regexp.prototype.flags
1.4.2 - 1.4.3
Outdated
ES6 spec-compliant RegExp.prototype.flags shim.
RegExp.prototype.flags
regex
regular expression
ES6
shim
+6
ljharb
is-regex
1.1.4
Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag
regex
regexp
is
regular expression
regular
+1
ljharb
is-date-object
1.0.5
Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
Date
ES6
toStringTag
@@toStringTag
Date object
ljharb
util
0.10.0 - 0.12.5
Node.js's util module for all engines
util
+3
functions-have-names
1.1.1 - 1.2.3
Does this JS environment support the `name` property on functions?
function
name
es5
names
functions
+1
ljharb
has
1.0.1 - 1.0.3
Outdated
Object.prototype.hasOwnProperty.call shortcut
tarruda
scheduler
0.15.0 - 0.23.0
Cooperative scheduler for the browser environment.
react
+1
prop-types
15.8.0 - 15.8.1
Runtime type checking for React props and similar objects.
react
is-arguments
1.1.1
Is this an arguments object? It's a harder question than you think.
arguments
js
javascript
is-arguments
is
+1
ljharb
react
16.13.0 - 18.2.0
React is a JavaScript library for building user interfaces.
react
+1
deep-equal
1.1.0 - 1.1.1
Outdated
node's assert.deepEqual algorithm
equality
equal
compare
ljharb
dayjs
1.11.1 - 1.11.5
Outdated
2KB immutable date time library alternative to Moment.js with the same modern API
dayjs
date
time
immutable
moment
iamkun
object-is
1.1.0 - 1.1.5
Outdated
ES2015-compliant shim for Object.is - differentiates between -0 and +0
is
Object.is
equality
sameValueZero
ES6
+4
ljharb
clsx
1.2.0 - 1.2.1
Outdated
A tiny (239B) utility for constructing className strings conditionally.
classes
classname
classnames
lukeed
classnames
2.3.0 - 2.3.1
Outdated
A simple utility for conditionally joining classNames together
react
css
classes
classname
classnames
+2
react-transition-group
2.4.0 - 3.0.0
Outdated
A react component toolset for managing animations
react
transition
addons
transition-group
animation
+2
stylis
3.1.0 - 3.5.4
Outdated
A Light–weight CSS Preprocessor
query-string
2.3.0 - 5.0.1
Outdated
Parse and stringify URL query strings
browser
querystring
query
string
qs
+9
sindresorhus
dom-helpers
5.0.1 - 5.2.1
tiny modular DOM lib for ie9+
dom-helpers
react-component
dom
api
cross-browser
+8
graphql
16.1.0 - 16.6.0
Outdated
A Query Language and Runtime which can target any service.
graphql
graphql-js
+5
sha.js
2.4.9 - 2.4.11
Streamable SHA hashes in pure javascript
hash-base
3.0.4 - 3.1.0
abstract base class for hash-streams
hash
stream
+1
md5.js
1.1.0 - 1.3.5
node style md5 on pure JavaScript
crypto
md5
+2
cipher-base
1.0.4
abstract base class for crypto-streams
cipher
stream
react-lifecycles-compat
3.0.4
Backwards compatibility polyfill for React class components
styled-components
4.0.0 - 5.3.6
Outdated
CSS for the <Component> Age. Style components your way with speed, strong typing, and flexibility.
react
css
css-in-js
styled-components
styling
+1
p-is-promise
3.0.0 - 4.0.0
Check if something is a promise
promise
is
detect
check
kind
+7
sindresorhus
zen-observable-ts
1.2.4 - 1.2.5
Outdated
Thin wrapper around zen-observable and @types/zen-observable, to support ESM exports as well as CommonJS exports
ts-invariant
0.9.0 - 0.9.4
Outdated
TypeScript implementation of invariant(condition, message)
invariant
assertion
precondition
TypeScript
benjamn
rc-util
4.20.3 - 5.3.0
Outdated
Common Utils For React Component
react
util
+6
@apollo/client
3.5.5 - 3.6.10
Outdated
A fully-featured caching GraphQL client.
apollo
graphql
react
hooks
client
+1
+1
react-scripts
5.0.0 - 5.0.1
Configuration and scripts for Create React App.
+1
gud
1.0.0
Create a 'gud nuff' (not cryptographically secure) globally unique id
global
unique
id
identifier
number
+2
thejameskyle
react-beautiful-dnd
6.0.0 - 6.0.2
Outdated
Beautiful and accessible drag and drop for lists with React
drag and drop
dnd
sortable
reorder
reorderable
+5
react-use
7.2.0 - 15.3.8
Outdated
Collection of React Hooks
streamich
use-subscription
1.3.0 - 1.5.1
Outdated
Reusable hooks
+1
body-scroll-lock
2.7.0 - 3.1.5
Outdated
Enables body scroll locking (for iOS Mobile and Tablet, Android, desktop Safari/Chrome/Firefox) without breaking scrolling of a target element (eg. modal/lightbox/flyouts/nav-menus)
body scroll
body scroll lock
react scroll lock
react scroll
scroll
+16
willmcpo
reactstrap
7.0.1
Outdated
React Bootstrap components
reactstrap
bootstrap
react
component
components
+2
+4
react-dates
20.2.4 - 21.8.0
A responsive and accessible date range picker component built with React
+4
@splitsoftware/splitio
10.4.0 - 10.17.3
Outdated
Split SDK
splitio
sdk
javascript
+5
react-multi-carousel
2.8.2
Outdated
Production-ready, lightweight fully customizable React carousel component that rocks supports multiple items and SSR(Server-side rendering) with typescript.
react
typescript
carousel
react-component
server-side rendering
+14
yizhuang
crypto-hash
0.1.0 - 2.0.1
Outdated
Tiny hashing module that uses the native crypto API in Node.js and the browser
crypto
hash
isomorphic
hashing
hasher
+6
sindresorhus
react-facebook
4.1.1 - 5.0.3
Outdated
Facebook components like a Login button, Like, Share, Comments, Embedded Post/Video, Messenger Chat and others
react
react-component
facebook
login
login button
+12
zlatkofedor
web-speech-cognitive-services
4.0.0
Outdated
Polyfill Web Speech API with Cognitive Services Speech-to-Text service
cognitive services
dictation
microphone
polyfill
react
+14
compulim
react-amphtml
3.0.0 - 4.0.2
Use amphtml components inside your React apps easily!
react
amphtml
dfrankland
Popular search queries
webpack.js.org
url
react-scripts
react
lottie-api
react-helmet-async
+7 packages
github.com
color-convert
@headlessui/react
hoist-non-react-statics
reactstrap
lit-html
+60 packages
pinterest.com
libphonenumber-js
react-relay
jss
@babel/runtime
redux-form
+50 packages
Popular packages
react
React is a JavaScript library for building user interfaces.
+6 634 websites
core-js
Standard library
+10 238 websites
es5-ext
ECMAScript extensions and shims
+10 229 websites
@babel/runtime
babel's modular runtime helpers
+8 352 websites
lodash
Lodash modular utilities.
+4 826 websites
axios
Promise based HTTP client for the browser and node.js
+4 742 websites