hulu.com 140 packages

Last scanned on Oct 29 at 06:04 AM
url-parse 1.4.3VulnerableOutdated
Small footprint URL parser that works seamlessly across Node.js and browser environments
License
MIT
Footprint
3 KB
Vulnerabilities
url-parse incorrectly parses hostname / protocol due to unstripped leading control characters.
Affected versions >=0 <1.5.9
Authorization bypass in url-parse
Affected versions >=0 <1.5.6
Path traversal in url-parse
Affected versions >=0 <1.5.0
Open redirect in url-parse
Affected versions >=0 <1.5.2
Authorization Bypass Through User-Controlled Key in url-parse
Affected versions >=0 <1.5.8
url-parse Incorrectly parses URLs that include an '@'
Affected versions >=0 <1.5.7
Improper Validation and Sanitization in url-parse
Affected versions >=0 <1.4.5
Matched Modules
Version distribution in production
206
1.5.10
167
1.5.9
50
1.5.3
47
1.4.6
47
1.4.7
21
1.4.3
lodash 4.17.16VulnerableOutdated
Lodash modular utilities.
lazysizes 1.0.1 - 1.1.5VulnerableOutdated
High performance (jankfree) lazy loader for images (including responsive images), iframes and scripts (widgets).
elliptic 6.5.2 - 6.5.3VulnerableOutdated
EC cryptography
next 9.4.2 - 11.0.1VulnerableOutdated
The React Framework
rauchg
timneutkens
vercel-release-bot
es5-ext 0.10.24 - 0.10.49VulnerableOutdated
ECMAScript extensions and shims
debug 2.3.1 - 3.1.0Outdated
Lightweight debugging utility for Node.js and the browser
tslib 1.2.0 - 2.4.0Outdated
Runtime library for TypeScript helper functions
ms 2.0.0Outdated
Tiny millisecond conversion utility
+5
gdborton
matheuss
rauchg
readable-stream 3.6.0Outdated
Node.js Streams, a user-land copy of the stream library from Node.js
string_decoder 1.1.0 - 1.3.0
The string_decoder module from Node core
uuid 7.0.0 - 8.0.0Outdated
RFC4122 (v1, v4, and v5) UUIDs
isarray 1.0.0 - 2.0.5
Array#isArray for older browsers
react-is 17.0.0 - 17.0.2Outdated
Brand checking of React Elements.
inherits 2.0.4
Browser-friendly inheritance fully compatible with standard node.js inherits()
form-data 1.0.0 - 4.0.0
A library to create readable "multipart/form-data" streams. Can be used to submit forms and file uploads to other web applications.
+2
mikeal
niftylettuce
alexindigo
buffer 4.6.0 - 4.9.2Outdated
Node.js Buffer API, for the browser
@babel/runtime 7.12.13 - 7.12.18Outdated
babel's modular runtime helpers
+1
hzoo
existentialism
nicolo-ribaudo
cookie 0.2.4 - 0.4.2Outdated
HTTP server cookie parsing and serialization
dougwilson
dougwilson
core-util-is 1.0.2 - 1.0.3
The `util.is*` functions introduced in Node v0.12.
base64-js 1.3.0 - 1.5.1
Base64 encoding/decoding in pure JS
events 3.0.0 - 3.3.0
Node's event emitter for all engines.
is-buffer 2.0.0 - 2.0.5
Determine if an object is a Buffer
core-js 2.5.7Outdated
Standard library
extend 3.0.2
Port of jQuery.extend for node.js and the browser
requires-port 1.0.0
Check if a protocol requires a certain port number to be added to an URL.
scheduler 0.15.0 - 0.23.0
Cooperative scheduler for the browser environment.
prop-types 15.7.0 - 15.7.2Outdated
Runtime type checking for React props and similar objects.
react 17.0.0 - 17.0.2Outdated
React is a JavaScript library for building user interfaces.
querystringify 2.0.0 - 2.1.0Outdated
Querystringify - Small, simple but powerful query string parser.
minimalistic-assert 1.0.0 - 1.0.1
minimalistic-assert ===
cwmma
indutny
@emotion/memoize 0.7.5 - 0.8.0Outdated
emotion's memoize utility
+1
emmatown
tkh44
emotion-release-bot
hoist-non-react-statics 3.3.1 - 3.3.2
Copies non-react specific statics from a child component to a parent component
mridgway
mridgway
unist-util-visit-parents 4.0.0 - 4.1.0Outdated
unist utility to recursively walk over nodes, with ancestral information
unist-util-is 4.0.4 - 4.1.0Outdated
unist utility to check if a node passes a test
unist-util-visit 1.4.0 - 2.0.3Outdated
unist utility to visit nodes
classnames 2.2.6 - 2.3.2Outdated
A simple utility for conditionally joining classNames together
mdast-util-to-string 2.0.0Outdated
mdast utility to get the plain text content of a node
react-transition-group 1.0.0 - 1.2.1Outdated
A react component toolset for managing animations
unist-util-stringify-position 2.0.0 - 2.0.3Outdated
unist utility to serialize a node, position, or point as a human readable location
graphql 15.4.0 - 15.8.0Outdated
A Query Language and Runtime which can target any service.
dom-helpers 3.4.0 - 5.2.1
tiny modular DOM lib for ie9+
sha.js 2.4.9 - 2.4.11
Streamable SHA hashes in pure javascript
dcousens
ljharb
cwmma
@emotion/serialize 1.0.2 - 1.1.1Outdated
serialization utils for emotion
+1
emmatown
tkh44
emotion-release-bot
vfile-message 1.0.0 - 2.0.4Outdated
vfile utility to create a virtual message
@popperjs/core 2.8.6Outdated
Tooltip and Popover Positioning Engine
@emotion/utils 1.0.0 - 1.2.0Outdated
internal utils for emotion
+1
emmatown
tkh44
emotion-release-bot
unified 8.0.0 - 9.2.2Outdated
parse, inspect, transform, and serialize content through syntax trees
asn1.js 5.2.0 - 5.4.1
ASN.1 encoder and decoder
vfile 2.1.0 - 4.2.0Outdated
Virtual file format for text processing
hash-base 3.0.4 - 3.1.0
abstract base class for hash-streams
hash.js 1.1.2 - 1.1.7
Various hash functions that could be run by both browser and node
@emotion/sheet 1.1.0 - 1.2.1Outdated
emotion's stylesheet
+1
emmatown
tkh44
emotion-release-bot
react-router 6.1.0 - 6.4.2Outdated
Declarative routing for React
@emotion/weak-memoize 0.1.1 - 0.3.0Outdated
A memoization function that uses a WeakMap
+1
emmatown
tkh44
emotion-release-bot
hmac-drbg 1.0.1
Deterministic random bit generator (hmac)
lodash-es 4.17.20 - 4.17.21
Lodash exported as ES modules.
redux 4.0.1Outdated
Predictable state container for JavaScript apps
react-fast-compare 3.1.0 - 3.2.0Outdated
Fastest deep equal comparison for React. Great for React.memo & shouldComponentUpdate. Also really fast general-purpose deep comparison.
space-separated-tokens 1.1.3 - 2.0.1Outdated
Parse and stringify space separated tokens
des.js 1.0.1Outdated
DES implementation
es6-promise 4.2.4 - 4.2.8
A lightweight library that provides tools for organizing asynchronous code
md5.js 1.1.0 - 1.3.5
node style md5 on pure JavaScript
pbkdf2 3.1.2
This library provides the functionality of PBKDF2 with the ability to use any supported hashing algorithm returned from crypto.getHashes()
parse-asn1 5.1.6Outdated
utility library for parsing asn1 files for use with browserify-sign.
+2
dcousens
ljharb
cwmma
cipher-base 1.0.4
abstract base class for crypto-streams
browserify-sign 2.4.0 - 2.8.0Outdated
adds node crypto signing for browsers
+2
dcousens
ljharb
cwmma
browserify-aes 0.4.0 - 0.8.1Outdated
aes, for browserify
evp_bytestokey 1.0.3
The insecure key derivation algorithm from OpenSSL
remark-parse 9.0.0Outdated
remark plugin to add support for parsing markdown input
browserify-rsa 3.0.0 - 4.0.1Outdated
RSA for browserify
+2
dcousens
ljharb
cwmma
crypto-browserify 1.0.9 - 2.0.0Outdated
implementation of crypto for the browser
+2
dcousens
ljharb
cwmma
create-ecdh 3.0.0 - 4.0.4
createECDH but browserifiable
public-encrypt 4.0.3
browserify version of publicEncrypt & privateDecrypt
+2
dcousens
ljharb
cwmma
diffie-hellman 1.1.2Outdated
pure js diffie-hellman
browserify-des 1.0.2
browserify-des ===
dcousens
ljharb
cwmma
js-cookie 3.0.1Outdated
A simple, lightweight JavaScript API for handling cookies
miller-rabin 1.1.0 - 4.0.1
Miller Rabin algorithm for primality test
trough 1.0.3 - 1.0.5Outdated
`trough` is middleware
randomfill 1.0.0 - 1.0.4
random fill from browserify stand alone
bail 1.0.0 - 2.0.2
Throw a given error
mdurl 0.0.1 - 1.0.1Outdated
URL utilities for markdown-it
vitaly
vitaly
querystring-es3 0.2.1
Node's querystring module for all engines. (ES3 compat fork)
loglevel 1.6.0 - 1.6.4Outdated
Minimal lightweight logging for JavaScript, adding reliable log level methods to any available console.log methods
@emotion/react 11.0.0 - 11.10.5Outdated
> Simple styling in React.
+1
emmatown
tkh44
emotion-release-bot
babel-runtime 6.18.0 - 6.26.0
babel selfContained runtime
hzoo
loganfsmyth
existentialism
micromark 2.11.1 - 2.11.2Outdated
small commonmark compliant markdown parser with positional info and concrete tokens
mdast-util-from-markdown 0.8.2 - 0.8.4Outdated
mdast utility to parse markdown
react-redux 4.4.8 - 4.4.10Outdated
Official React bindings for Redux
mdast-util-definitions 4.0.0Outdated
mdast utility to find definition nodes in a tree
property-information 5.6.0Outdated
Info on the properties and attributes of the web platform
comma-separated-tokens 1.0.6 - 1.0.8Outdated
Parse and stringify comma-separated tokens
polished 3.6.6 - 4.2.2Outdated
A lightweight toolset for writing styles in Javascript.
style-to-object 0.2.3 - 0.3.0Outdated
Parse CSS inline style to JavaScript object.
unist-util-position 3.1.0Outdated
unist utility to get the position of a node
mdast-util-to-hast 10.2.0Outdated
mdast utility to transform to hast
inline-style-parser 0.1.0 - 0.1.1Outdated
An inline style parser.
styled-jsx 2.2.6 - 3.4.7Outdated
Full CSS support for JSX without compromises
redux-thunk 2.1.0 - 2.4.1Outdated
Thunk middleware for Redux.
unist-util-generated 1.1.6 - 2.0.0Outdated
unist utility to check if a node is generated
extract-files 6.0.0 - 8.1.0Outdated
A function to recursively extract files and their object paths within a value, replacing them with null in a deep clone without mutating the original value. FileList instances are treated as File instance arrays. Files are typically File and Blob instance
@mui/utils 5.0.0 - 5.10.9Outdated
Utility functions for React components.
engine.io-client 6.1.1Outdated
Client for the realtime Engine
rauchg
darrachequesne
graphql-request 3.1.0 - 3.4.0Outdated
Minimal GraphQL client supporting Node and browsers for scripts or simple apps
remark-rehype 2.0.0 - 8.1.0Outdated
remark plugin that turns markdown into HTML to support rehype
unist-builder 2.0.1 - 2.0.3Outdated
unist utility to create a new trees with a nice syntax
web-vitals 1.1.0 - 1.1.1Outdated
Easily measure performance metrics in JavaScript
react-i18next 1.0.0 - 9.0.10Outdated
Internationalization for react done right. Using the i18next i18n ecosystem.
@apollo/client 3.0.0 - 3.7.1Outdated
A fully-featured caching GraphQL client.
react-scripts 0.4.2Outdated
Configuration and scripts for Create React App.
+1
fb
timer
iansu
react-markdown 6.0.3Outdated
React component to render markdown
string-hash 1.1.1 - 1.1.3
fast string hashing function
fp-ts 2.6.6 - 2.9.5Outdated
Functional programming in TypeScript
@angular/cdk 6.4.3Outdated
Angular Material Component Development Kit
dijkstrajs 1.0.1 - 1.0.2Outdated
A simple JavaScript implementation of Dijkstra's single-source shortest-paths algorithm.
qrcode 1.4.3 - 1.4.4Outdated
QRCode / 2d Barcode api with both server side and client side support using canvas
react-use 17.1.1 - 17.3.1Outdated
Collection of React Hooks
streamich
streamich
downshift 6.1.10 - 7.0.1Outdated
🏎 A set of primitives to build simple, flexible, WAI-ARIA compliant React autocomplete, combobox or select dropdown components.
react-query 3.38.1 - 3.39.1Outdated
Hooks for managing, caching and syncing asynchronous and remote data in React
tannerlinsley
tkdodo
react-bootstrap 0.30.2 - 1.0.1Outdated
Bootstrap 5 components built with React
react-tooltip 3.4.3Outdated
react tooltip component
react-player 1.12.0 - 1.15.3Outdated
A React component for playing a variety of URLs, including file paths, YouTube, Facebook, Twitch, SoundCloud, Streamable, Vimeo, Wistia and DailyMotion
@chakra-ui/utils 1.8.2 - 2.0.11Outdated
Common utilities and types for Chakra UI
segunadebayo
_codebender828
style-inject 0.3.0
Inject style tag to document head.
smoothscroll-polyfill 0.4.4
Smooth Scroll behavior polyfill
@reach/auto-id 0.7.1 - 0.16.0Outdated
Autogenerate IDs to facilitate WAI-ARIA and server rendering.
+1
ryanflorence
mjackson
chancestrickland
react-scroll 1.5.5Outdated
A scroll component for React.js
chain-function 1.0.0 - 1.0.1
chain a bunch of functions together into a single call
monastic.panic
monastic.panic
gatsby 1.0.1 - 1.9.279Outdated
Blazing fast modern site generator for React
bootstrap-vue 1.0.0 - 2.15.0Outdated
With more than 85 components, over 45 available plugins, several directives, and 1000+ icons, BootstrapVue provides one of the most comprehensive implementations of the Bootstrap v4 component and grid system available for Vue.js v2.6, complete with extens
@reach/dialog 0.13.1 - 0.17.0Outdated
Accessible React Modal Dialog.
+1
ryanflorence
mjackson
chancestrickland
nookies 2.0.0 - 2.5.2
A set of cookie helpers for Next.js
mobile-detect 1.3.7 - 1.4.5
Device detection (phone, tablet, desktop, mobile grade, os, versions)
@analytics/storage-utils 0.2.5 - 0.2.14Outdated
Storage utility with fallbacks
react-relay 1.6.0Outdated
A framework for building GraphQL-driven React applications.
component-cookie 1.1.2 - 1.1.5
Tiny cookie component
+1
dominicbarnes
stephenmathieson
jongleberry
@tannin/plural-forms 1.0.0 - 1.1.0
Compiles a function to compute the plural forms index for a given value
aduth
aduth
@react-hook/window-scroll 1.0.7 - 1.1.5Outdated
A React hook for updating components when the scroll position of the window on the y-axis changes
react-say 1.1.0 - 1.1.1Outdated
[![npm version](https://badge.fury.io/js/react-say.svg)](https://badge.fury.io/js/react-say) [![Build Status](https://travis-ci.org/compulim/react-say.svg?branch=master)](https://travis-ci.org/compulim/react-say)
react-amphtml 3.0.0 - 3.0.1Outdated
Use amphtml components inside your React apps easily!
dfrankland
dfrankland