hioscar.com 159 packages

Last scanned on Jan 19 at 11:05 AM
url-parse 1.1.9 - 1.4.0VulnerableOutdated
Small footprint URL parser that works seamlessly across Node.js and browser environments
License
MIT
Footprint
3 KB
Vulnerabilities
url-parse incorrectly parses hostname / protocol due to unstripped leading control characters.
Affected versions >=0 <1.5.9
Authorization bypass in url-parse
Affected versions >=0 <1.5.6
Path traversal in url-parse
Affected versions >=0 <1.5.0
Open redirect in url-parse
Affected versions >=0 <1.5.2
Authorization Bypass Through User-Controlled Key in url-parse
Affected versions >=0 <1.5.8
Open Redirect in url-parse
Affected versions >=0 <1.4.3
url-parse Incorrectly parses URLs that include an '@'
Affected versions >=0 <1.5.7
Improper Validation and Sanitization in url-parse
Affected versions >=0 <1.4.5
Matched Modules
Version distribution in production
206
1.5.10
167
1.5.9
50
1.5.3
47
1.4.6
47
1.4.7
7
1.4.0
lodash-es 3.10.0 - 3.10.1VulnerableOutdated
Lodash exported as ES modules.
crypto-js 3.1.2 - 4.1.1VulnerableOutdated
JavaScript library of crypto standards.
lodash 4.17.16VulnerableOutdated
Lodash modular utilities.
querystringify 1.0.0VulnerableOutdated
Querystringify - Small, simple but powerful query string parser.
trim 0.0.1VulnerableOutdated
Trim string whitespace
ms 0.7.1VulnerableOutdated
Tiny millisecond conversion utility
+5
gdborton
matheuss
rauchg
debug 2.3.1 - 3.1.0Outdated
Lightweight debugging utility for Node.js and the browser
uuid 7.0.0 - 8.0.0Outdated
RFC4122 (v1, v4, and v5) UUIDs
ajv 7.0.0 - 8.12.0
Another JSON Schema Validator
isarray 0.0.0 - 2.0.5
Array#isArray for older browsers
react-is 16.3.0 - 16.13.1Outdated
Brand checking of React Elements.
inherits 2.0.3Outdated
Browser-friendly inheritance fully compatible with standard node.js inherits()
qs 6.9.0 - 6.11.0Outdated
A querystring parser that supports nesting and arrays, with a depth limit
buffer 4.6.0 - 4.9.2Outdated
Node.js Buffer API, for the browser
@babel/runtime 7.9.6 - 7.12.18Outdated
babel's modular runtime helpers
+1
hzoo
existentialism
nicolo-ribaudo
get-intrinsic 1.0.0 - 1.1.2Outdated
Get and robustly cache all JS language-level intrinsics at first require time
function-bind 1.1.0 - 1.1.1Outdated
Implementation of Function.prototype.bind
path-to-regexp 1.7.0 - 1.8.0Outdated
Express style path to RegExp utility
axios 0.27.2Outdated
Promise based HTTP client for the browser and node.js
call-bind 1.0.0 - 1.0.2Outdated
Robustly `.call.bind()` a function
object-inspect 1.12.2 - 1.12.3Outdated
string representations of objects in node and the browser
has-symbols 1.0.0 - 1.0.1Outdated
Determine if the JS environment has Symbol support. Supports spec, or shams.
is-plain-obj 1.1.0Outdated
Check if a value is a plain object
sindresorhus
sindresorhus
side-channel 1.0.4Outdated
Store information about any JS value in a side channel. Uses WeakMap if available.
es-abstract 1.10.0Outdated
ECMAScript spec abstract operations.
base64-js 1.3.0 - 1.5.1
Base64 encoding/decoding in pure JS
define-properties 1.1.3 - 1.1.4Outdated
Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.
is-callable 1.1.3 - 1.1.5Outdated
Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.
is-buffer 1.1.4 - 1.1.6Outdated
Determine if an object is a Buffer
deepmerge 1.5.2Outdated
A library for deep (recursive) merging of Javascript objects
object-keys 1.1.0 - 1.1.1
An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim
is-regex 1.0.4 - 1.0.5Outdated
Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag
is-date-object 1.0.1 - 1.0.3Outdated
Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
htmlparser2 2.2.3 - 2.6.0Outdated
Fast & forgiving HTML/XML parser
es-to-primitive 1.1.1 - 1.2.1
ECMAScript “ToPrimitive” algorithm. Provides ES5 and ES2015 versions.
object.values 1.0.0 - 1.1.6Outdated
ES2017 spec-compliant Object.values shim.
extend 3.0.0 - 3.0.1Outdated
Port of jQuery.extend for node.js and the browser
has 1.0.1 - 1.0.3Outdated
Object.prototype.hasOwnProperty.call shortcut
tarruda
tarruda
requires-port 1.0.0
Check if a protocol requires a certain port number to be added to an URL.
scheduler 0.15.0 - 0.23.0
Cooperative scheduler for the browser environment.
array.prototype.flat 1.2.1Outdated
An ES2019 spec-compliant `Array.prototype.flat` shim/polyfill/replacement that works as far down as ES3.
prop-types 15.7.0 - 15.7.2Outdated
Runtime type checking for React props and similar objects.
react 17.0.0 - 18.2.0
React is a JavaScript library for building user interfaces.
json-stringify-safe 5.0.1
Like JSON.stringify, but doesn't blow up on circular refs.
date-fns 0.5.0 - 1.11.1Outdated
Modern JavaScript date utility library
kossnocorp
kossnocorp
lodash.isplainobject 4.0.6
The lodash method `_.isPlainObject` exported as a module.
clone-deep 0.1.1 - 0.2.0Outdated
Recursively (deep) clone JavaScript native types, like Object, Array, RegExp, Date as well as primitives.
repeat-string 1.6.0 - 1.6.1
Repeat the given string n times. Fastest implementation for repeating a string.
hoist-non-react-statics 2.5.1 - 2.5.5Outdated
Copies non-react specific statics from a child component to a parent component
mridgway
mridgway
unist-util-is 2.1.0 - 2.1.3Outdated
unist utility to check if a node passes a test
promise 7.0.4Outdated
Bare bones Promises/A+ implementation
forbeslindesay
then-promise-bot
path-browserify 0.0.0 - 0.0.1Outdated
the path module from node core for browsers
unist-util-visit 1.3.0 - 1.3.1Outdated
unist utility to visit nodes
classnames 2.0.0 - 2.1.3Outdated
A simple utility for conditionally joining classNames together
lodash.isstring 4.0.1
The lodash method `_.isString` exported as a module.
react-transition-group 1.0.0 - 1.2.1Outdated
A react component toolset for managing animations
unist-util-stringify-position 1.1.1 - 1.1.2Outdated
unist utility to serialize a node, position, or point as a human readable location
dom-helpers 3.4.0 - 5.2.1
tiny modular DOM lib for ie9+
ramda 0.23.0 - 0.24.1Outdated
A practical functional library for JavaScript programmers.
vfile-message 1.0.0 - 2.0.4Outdated
vfile utility to create a virtual message
unified 6.1.5 - 6.1.6Outdated
parse, inspect, transform, and serialize content through syntax trees
vfile 2.1.0 - 4.2.0Outdated
Virtual file format for text processing
@sentry/utils 5.0.6 - 6.13.3Outdated
Utilities for all Sentry JavaScript SDKs
+8
benvinegar
billyvg
mitsuhiko
react-router 2.6.1 - 2.8.1Outdated
Declarative routing for React
is-promise 2.1.0 - 4.0.0
Test whether an object looks like a promises-a+ promise
forbeslindesay
then-bot
es5-ext 0.3.0 - 0.10.62Outdated
ECMAScript extensions and shims
next-tick 1.0.0 - 1.1.0
Environment agnostic nextTick polyfill
redux 3.5.1 - 3.5.2Outdated
Predictable state container for JavaScript apps
react-fast-compare 2.0.4Outdated
Fastest deep equal comparison for React. Great for React.memo & shouldComponentUpdate. Also really fast general-purpose deep comparison.
es6-promise 3.3.0 - 4.2.3Outdated
A lightweight library that provides tools for organizing asynchronous code
remark-parse 5.0.0Outdated
remark plugin to add support for parsing markdown input
crypto-browserify 1.0.9 - 2.0.0Outdated
implementation of crypto for the browser
+2
dcousens
ljharb
cwmma
d3-array 2.7.0 - 3.2.2Outdated
Array manipulation, ordering, searching, summarizing, etc.
trough 1.0.1 - 1.0.2Outdated
`trough` is middleware
bail 1.0.0 - 2.0.2
Throw a given error
parse-entities 1.1.1 - 1.1.2Outdated
Parse HTML character references
querystring-es3 0.2.1
Node's querystring module for all engines. (ES3 compat fork)
proto-list 1.0.0 - 1.1.0Outdated
A utility for managing a prototype chain
isaacs
isaacs
is-alphabetical 1.0.0 - 2.0.0Outdated
Check if a character is alphabetical
is-decimal 1.0.0 - 2.0.0Outdated
Check if a character is decimal
is-hexadecimal 1.0.0 - 2.0.0Outdated
Check if a character is hexadecimal
shallowequal 1.0.1 - 1.1.0
Like lodash isEqualWith but for shallow equal.
react-redux 5.1.0 - 7.2.9Outdated
Official React bindings for Redux
replace-ext 0.0.1 - 1.0.0Outdated
Replaces a file extension with another one.
unist-util-remove-position 1.1.0 - 3.0.0Outdated
unist utility to remove positions from a tree
vfile-location 2.0.0 - 3.0.1Outdated
vfile utility to convert between positional (line and column-based) and offset (range-based) locations
synchronous-promise 1.0.0 - 2.0.16Outdated
Synchronous Promise-like prototype to use in testing where you would have used an ES6 Promise
fluffynuts
fluffynuts
@formatjs/ecma402-abstract 1.0.3 - 1.14.3Outdated
A collection of implementation for ECMAScript abstract operations
intl-messageformat 2.1.0 - 2.2.0Outdated
Formats ICU Message strings with number, date, plural, and select placeholders to create localized messages.
framer-motion 6.5.0 - 8.5.0Outdated
A simple and powerful JavaScript animation library
@angular/core 8.0.0 - 12.2.16Outdated
Angular - the core framework
angular
google-wombot
@sentry/hub 5.1.0 - 5.1.2Outdated
Sentry hub which handles global state managment.
+8
benvinegar
billyvg
mitsuhiko
collapse-white-space 1.0.0 - 2.0.0Outdated
Collapse white space
@angular/common 10.0.0 - 15.1.1Outdated
Angular - commonly needed directives and services
angular
google-wombot
unherit 1.1.0 - 1.1.3Outdated
Create a subclass that can be modified without affecting the super class
react-markdown 3.3.0Outdated
React component to render markdown
@sentry/minimal 4.3.3 - 6.19.7
Sentry minimal library that can be used in other packages
+8
benvinegar
billyvg
mitsuhiko
trim-trailing-lines 1.1.0 - 1.1.3Outdated
Remove final line feeds from a string
is-whitespace-character 1.0.0 - 2.0.1
Check if a character is a whitespace character
state-toggle 1.0.0 - 2.0.1Outdated
Enter/exit a state
markdown-escapes 1.0.0 - 1.0.4Outdated
Legacy list of escapable characters in markdown
is-word-character 1.0.0 - 2.0.1
Check if a character is a word character
focus-lock 0.2.0 - 0.11.4Outdated
DOM trap for a focus
foreach 2.0.4 - 2.0.6
foreach component + npm package
gud 1.0.0
Create a 'gud nuff' (not cryptographically secure) globally unique id
framesync 4.0.0 - 6.1.2
A frame-synced render loop for JavaScript
popmotion
popmotion
faker 2.0.1 - 2.1.5Outdated
Generate massive amounts of fake contextual data
marak
marak
react-side-effect 1.2.0Outdated
Create components whose prop changes map to a global side effect
react-helmet 5.0.0 - 5.2.1Outdated
A document head manager for React
react-use 16.0.0 - 17.4.0Outdated
Collection of React Hooks
streamich
streamich
xstate 4.7.0 - 4.19.1Outdated
Finite State Machines and Statecharts for the Modern Web.
airbnb-prop-types 2.13.0 - 2.13.2Outdated
Custom React PropType validators that we use at Airbnb.
react-intl 2.6.0 - 2.9.0Outdated
Internationalize React apps. This library provides React components and an API to format dates, numbers, and strings, including pluralization and handling translations.
component-bind 1.0.0
function binding utility
intl-messageformat-parser 1.3.0 - 1.5.1Outdated
Parses ICU Message strings into an AST via JavaScript.
popmotion 8.6.1 - 8.7.6Outdated
The animator's toolbox
style-value-types 1.0.0 - 5.1.2
Parsers, transformers and tests for special value types, eg: %, hex codes etc.
react-bootstrap 0.32.0 - 0.33.1Outdated
Bootstrap 5 components built with React
to-no-case 0.1.3 - 1.0.0Outdated
Remove any existing casing from a string.
consolidated-events 1.0.0 - 1.1.1Outdated
Manage multiple event handlers using few event listeners
@contentful/rich-text-types 4.1.0 - 15.3.0Outdated
Type definitions and constants for the Contentful rich text field type.
it-internal
whydah-gally
contentful-ecosystem
p-throttle 4.1.0 - 5.0.0Outdated
Throttle promise-returning & async functions
contentful 9.1.34Outdated
Client for Contentful's Content Delivery API
hungryblank
cf-admin
contentful-ecosystem
murmurhash 0.0.1 - 0.0.2Outdated
A Node.js module for the optimized JavaScript implementation of the MurmurHash algorithms.
perezd
perezd
jsonp 0.2.0 - 0.2.1
A sane JSONP implementation.
tootallnate
rauchg
feross
contentful-resolve-response 1.2.2 - 1.3.12Outdated
[![npm](https://img.shields.io/npm/v/contentful-resolve-response.svg)](https://www.npmjs.com/package/contentful-resolve-response)
+1
hungryblank
zcei
cf-admin
document.contains 1.0.1Outdated
Polyfill/shim for `document.contains`
react-outside-click-handler 1.0.0 - 1.2.4Outdated
A React component for dealing with clicks outside its subtree
+2
brieb
airbnbeng
lencioni
react-moment-proptypes 1.6.0 - 1.8.1
React proptype for moment module
react-with-direction 1.0.0 - 1.4.0
Components to provide and consume RTL or LTR direction in React
+4
brieb
airbnbeng
lencioni
react-with-styles 3.2.1 - 3.2.3Outdated
[![Build Status][travis-svg]][travis-url] [![dependency status][deps-svg]][deps-url] [![dev dependency status][dev-deps-svg]][dev-deps-url] [![License][license-image]][license-url] [![Downloads][downloads-image]][downloads-url]
intl-format-cache 2.0.5 - 2.1.0Outdated
A memoizer factory for Intl format constructors.
react-dates 20.2.1 - 20.2.3Outdated
A responsive and accessible date range picker component built with React
+4
lencioni
ljharb
ahuth
react-with-styles-interface-css 4.0.0 - 4.0.3Outdated
Interface for react-with-styles outputting CSS
global-cache 1.2.0 - 1.2.1
Sometimes you have to do horrible things, like use the global object to share a singleton. Abstract that away, with this!
@contentful/rich-text-react-renderer 13.4.0 - 15.0.0Outdated
React renderer for the Contentful rich text field type.
it-internal
whydah-gally
contentful-ecosystem
chain-function 1.0.0 - 1.0.1
chain a bunch of functions together into a single call
monastic.panic
monastic.panic
redux-form 7.0.0 - 8.3.9Outdated
A higher order component decorator for forms using Redux and React
keymirror 0.1.0 - 0.1.1
A simple utility for creating an object with values equal to its keys. Identical to react/lib/keyMirror
strml
strml
bootstrap-vue 2.0.0 - 2.15.0Outdated
With more than 85 components, over 45 available plugins, several directives, and 1000+ icons, BootstrapVue provides one of the most comprehensive implementations of the Bootstrap v4 component and grid system available for Vue.js v2.6, complete with extens
react-swipeable-views-core 0.13.1 - 0.14.0
react-swipeable-views core modules
oliviertassinari
jeanpoelie
caleb-harrelson
react-swipeable-views 0.11.0 - 0.13.9Outdated
A React component for swipeable views
amplitude-js 5.2.0Outdated
Javascript library for Amplitude Analytics
text-mask-addons 1.0.0 - 3.3.0Outdated
Addons for Text Mask https://github.com/text-mask/text-mask
intl-relativeformat 2.1.0Outdated
Formats JavaScript dates to relative time strings.
store 1.3.20Outdated
A localStorage wrapper for all browsers without using cookies or flash. Uses localStorage, globalStorage, and userData behavior under the hood
marcuswestin
marcuswestin
react-instantsearch-dom 6.13.0 - 6.38.1Outdated
⚡ Lightning-fast search for React DOM, by Algolia
@popmotion/popcorn 0.3.6 - 0.4.4
Utility functions for animation and interactions.
popmotion
popmotion
stylefire 0.0.1 - 7.0.3
Performant, simplified stylers for CSS, SVG, path and DOM scroll.
component-cookie 1.1.2 - 1.1.5
Tiny cookie component
+1
dominicbarnes
stephenmathieson
jongleberry
component-url 0.2.0 - 0.2.1
url parser.
timaschew
timaschew
@segment/top-domain 3.0.0 - 3.0.1
Finds the top domain for a URL
@atlaskit/spinner 4.0.3 - 12.1.7Outdated
A spinner is an animated spinning icon that lets users know content is being loaded.
atlaskit
atlaskit
@tannin/plural-forms 1.0.0 - 1.1.0
Compiles a function to compute the plural forms index for a given value
aduth
aduth
scroll-to-element 2.0.2 - 2.0.3
Smooth scrolling to an element via selector or node reference
most 0.7.0 - 0.9.1Outdated
Monadic streams
prebid.js 1.38.0 - 7.32.0Outdated
Header Bidding Management Library
react-amphtml 3.1.0 - 4.0.2
Use amphtml components inside your React apps easily!
dfrankland
dfrankland