inspirehep.net 193 packages

Last scanned on Jan 19 at 09:57 AM
property-expr 1.5.1VulnerableOutdated
tiny util for getting and setting deep object props safely
License
MIT
Footprint
1 KB
Vulnerabilities
Prototype Pollution in property-expr
Affected versions >=0 <2.0.3
Matched Modules
Version distribution in production
248
2.0.5
143
2.0.4
47
1.5.1
10
2.0.3
4
2.0.0
4
2.0.1
lodash 4.17.16VulnerableOutdated
Lodash modular utilities.
axios 0.18.1VulnerableOutdated
Promise based HTTP client for the browser and node.js
moment 2.24.0VulnerableOutdated
Parse, validate, manipulate, and display dates
d3-color 1.4.1 - 3.0.1VulnerableOutdated
Color spaces! RGB, HSL, Cubehelix, Lab and HCL (Lch).
postcss 8.4.15 - 8.4.21VulnerableOutdated
Tool for transforming styles with JS plugins
markdown-it 2.0.0 - 3.1.0VulnerableOutdated
Markdown-it - modern pluggable markdown parser.
es5-ext 0.10.24 - 0.10.49VulnerableOutdated
ECMAScript extensions and shims
tslib 1.2.0 - 2.4.1Outdated
Runtime library for TypeScript helper functions
lru-cache x.x.x
A cache object that deletes the least-recently-used items.
yallist 1.0.0 - 4.0.0Outdated
Yet Another Linked List
isaacs
isaacs
escape-string-regexp 4.0.0 - 5.0.0
Escape RegExp special characters
uuid 7.0.2 - 8.0.0Outdated
RFC4122 (v1, v4, and v5) UUIDs
isarray 1.0.0 - 2.0.5
Array#isArray for older browsers
react-is 16.3.0 - 16.13.1Outdated
Brand checking of React Elements.
qs 6.11.0Outdated
A querystring parser that supports nesting and arrays, with a depth limit
buffer 4.6.0 - 4.9.2Outdated
Node.js Buffer API, for the browser
regenerator-runtime x.x.x
Runtime for Regenerator-compiled generator and async functions.
picocolors x.x.x
The tiniest and the fastest library for terminal output formatting with ANSI colors
entities 2.2.0Outdated
Encode & decode XML and HTML entities with ease & speed
get-intrinsic 1.1.3Outdated
Get and robustly cache all JS language-level intrinsics at first require time
function-bind 1.1.0 - 1.1.1Outdated
Implementation of Function.prototype.bind
@babel/runtime 7.16.5 - 7.18.3Outdated
babel's modular runtime helpers
+1
hzoo
existentialism
nicolo-ribaudo
path-to-regexp 1.8.0Outdated
Express style path to RegExp utility
call-bind 1.0.2Outdated
Robustly `.call.bind()` a function
object-inspect 1.12.2Outdated
string representations of objects in node and the browser
has-symbols 1.0.2 - 1.0.3
Determine if the JS environment has Symbol support. Supports spec, or shams.
ieee754 1.1.0 - 1.2.1
Read/write IEEE754 floating point numbers from/to a Buffer or array-like object
side-channel 1.0.4Outdated
Store information about any JS value in a side channel. Uses WeakMap if available.
is-plain-object 4.1.0 - 5.0.0
Returns true if an object was created by the `Object` constructor, or Object.create(null).
has-property-descriptors 1.0.0Outdated
Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD.
domutils 2.8.0 - 3.0.1Outdated
Utilities for working with htmlparser2's dom
base64-js 1.3.0 - 1.5.1
Base64 encoding/decoding in pure JS
define-properties 1.1.4Outdated
Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.
object-assign 4.1.0 - 4.1.1
ES2015 `Object.assign()` ponyfill
dom-serializer 1.3.2 - 1.4.1Outdated
render domhandler DOM nodes to a string
nanoid x.x.x
A tiny (116 bytes), secure URL-friendly unique string ID generator
domhandler 4.2.2 - 4.3.1Outdated
Handler for htmlparser2 that turns pages into a dom
has-tostringtag 1.0.0Outdated
Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.
is-buffer 2.0.0 - 2.0.5
Determine if an object is a Buffer
object-keys 1.1.0 - 1.1.1
An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim
regexp.prototype.flags 1.4.2 - 1.4.3Outdated
ES6 spec-compliant RegExp.prototype.flags shim.
deepmerge 4.2.2Outdated
A library for deep (recursive) merging of Javascript objects
domelementtype 2.2.0 - 2.3.0
all the types of nodes in htmlparser2's dom
is-regex 1.1.4
Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag
core-js 2.3.0 - 2.6.12Outdated
Standard library
is-date-object 1.0.5
Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
htmlparser2 6.1.0Outdated
Fast & forgiving HTML/XML parser
functions-have-names 1.1.1 - 1.2.3
Does this JS environment support the `name` property on functions?
scheduler 0.19.0 - 0.19.1Outdated
Cooperative scheduler for the browser environment.
has 1.0.1 - 1.0.3Outdated
Object.prototype.hasOwnProperty.call shortcut
tarruda
tarruda
prop-types 15.7.0 - 15.7.2Outdated
Runtime type checking for React props and similar objects.
is-arguments 1.1.1
Is this an arguments object? It's a harder question than you think.
react 16.13.0 - 17.0.2Outdated
React is a JavaScript library for building user interfaces.
process x.x.x
process information for node.js and browsers
react-dom 16.13.0 - 16.14.0Outdated
React package for working with the DOM.
performance-now 0.1.3 - 2.1.0
Implements performance.now (based on process.hrtime).
meryn
meryn
deep-equal 1.1.0 - 1.1.1Outdated
node's assert.deepEqual algorithm
object-is 1.1.2 - 1.1.5Outdated
ES2015-compliant shim for Object.is - differentiates between -0 and +0
immutable 4.0.0 - 4.2.2Outdated
Immutable Data Collections
html-entities 2.0.4 - 2.3.3Outdated
Fastest HTML entities encode/decode library.
hoist-non-react-statics 3.3.1 - 3.3.2
Copies non-react specific statics from a child component to a parent component
mridgway
mridgway
invariant 2.2.0 - 2.2.4
invariant
classnames 2.3.2Outdated
A simple utility for conditionally joining classNames together
tiny-invariant 0.0.2 - 1.3.1Outdated
A tiny invariant function
@sentry/types 5.0.0 - 6.19.7Outdated
Types for all Sentry JavaScript SDKs
+8
benvinegar
billyvg
mitsuhiko
lodash.clonedeep 4.5.0
The lodash method `_.cloneDeep` exported as a module.
@sentry/utils 5.25.0 - 6.0.2Outdated
Utilities for all Sentry JavaScript SDKs
+8
benvinegar
billyvg
mitsuhiko
memoize-one 6.0.0
A memoization library which only remembers the latest invocation
react-router 5.0.0 - 5.3.4Outdated
Declarative routing for React
@sentry/core 5.30.0Outdated
Base implementation for all Sentry JavaScript SDKs
+8
benvinegar
billyvg
mitsuhiko
lodash-es 4.17.20 - 4.17.21
Lodash exported as ES modules.
react-fast-compare 2.0.4Outdated
Fastest deep equal comparison for React. Great for React.memo & shouldComponentUpdate. Also really fast general-purpose deep comparison.
redux 4.0.1 - 4.2.0Outdated
Predictable state container for JavaScript apps
react-router-dom 5.2.1 - 5.3.4Outdated
Declarative routing for React web applications
warning 1.0.0 - 4.0.3
A mirror of Facebook's Warning
moment-timezone 0.5.37Outdated
Parse and display moments in any timezone.
d3-array 1.2.0 - 1.2.4Outdated
Array manipulation, ordering, searching, summarizing, etc.
character-entities-legacy 2.0.0Outdated
List of legacy HTML named character references that don’t need a trailing semicolon
shallowequal 1.0.1 - 1.1.0
Like lodash isEqualWith but for shallow equal.
babel-runtime 6.18.0 - 6.26.0
babel selfContained runtime
hzoo
loganfsmyth
existentialism
react-redux 6.0.1Outdated
Official React bindings for Redux
@xmldom/xmldom 0.7.0 - 0.8.6Outdated
A pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.
tiny-warning 0.0.1 - 1.0.3
A tiny warning function
alexreardon
alexreardon
history 4.0.0 - 4.10.1Outdated
Manage session history with JavaScript
d3-interpolate 1.4.0 - 3.0.1
Interpolate numbers, colors, strings, arrays, objects, whatever!
raf 3.2.0 - 3.4.1
requestAnimationFrame polyfill for node and the browser
d3-time 1.1.0Outdated
A calculator for humanity’s peculiar conventions of time.
d3-shape 1.3.7Outdated
Graphical primitives for visualization, such as lines and areas.
d3-path 1.0.3 - 3.0.1Outdated
Serialize Canvas path commands to SVG.
react-lifecycles-compat 3.0.4
Backwards compatibility polyfill for React class components
fb
sophiebits
d3-format 1.4.5Outdated
Format numbers for human consumption.
toposort 2.0.2
Topological sort of directed ascyclic graphs (like dependecy lists)
d3-scale 1.0.7Outdated
Encodings that map abstract data to visual representation.
d3-time-format 2.3.0Outdated
A JavaScript time formatter and parser inspired by strftime and strptime.
resize-observer-polyfill 1.5.1
A polyfill for the Resize Observer API
yup 0.26.10Outdated
Dead simple Object schema validation
monastic.panic
monastic.panic
@sentry/browser 5.29.1 - 5.30.0Outdated
Official Sentry SDK for browsers
+8
benvinegar
billyvg
mitsuhiko
copy-to-clipboard 3.3.2 - 3.3.3
Copy stuff into clipboard using JS with fallbacks
redux-thunk 2.4.0 - 2.4.1Outdated
Thunk middleware for Redux.
global 2.0.4 - 4.4.0
Require global variables
jerrysievert
mattesch
raynos
toggle-selection 1.0.5 - 1.0.6
Toggle current selected content in browser
lodash.mergewith 4.6.2
The Lodash method `_.mergeWith` exported as a module.
react-select 5.5.5Outdated
A Select control built with and for ReactJS
synchronous-promise 2.0.0 - 2.0.16Outdated
Synchronous Promise-like prototype to use in testing where you would have used an ES6 Promise
fluffynuts
fluffynuts
compute-scroll-into-view 1.0.17Outdated
The engine that powers scroll-into-view-if-needed
resolve-pathname 3.0.0
Resolve URL pathnames using JavaScript
mjackson
mjackson
value-equal 1.0.1
Are these two JavaScript values equal?
mjackson
mjackson
d3-geo 1.5.0 - 1.12.1Outdated
Shapes and calculators for spherical coordinates.
@sentry/hub 5.27.0 - 6.0.4Outdated
Sentry hub which handles global state managment.
+8
benvinegar
billyvg
mitsuhiko
rc-util 5.16.0 - 5.21.5Outdated
Common Utils For React Component
@sentry/minimal 4.3.3 - 6.19.7
Sentry minimal library that can be used in other packages
+8
benvinegar
billyvg
mitsuhiko
formik 1.0.0 - 2.2.9Outdated
Build forms in React, without the tears
scroll-into-view-if-needed 2.2.29Outdated
Ponyfill for upcoming Element.scrollIntoView() APIs like scrollMode: if-needed, behavior: smooth and block: center
exenv 1.1.0 - 1.2.2
React's ExecutionEnvironment module extracted for use in other packages & components
string-convert 0.2.0 - 0.2.1
String convertions
akiran
akiran
json2mq 0.2.0
Generate media query string from JSON or javascript object
akiran
akiran
sanitize-html x.x.x
Clean up user-submitted HTML, preserving allowlisted elements and allowlisted attributes on a per-element basis
lodash.omit 4.5.0
The lodash method `_.omit` exported as a module.
react-side-effect 1.2.0Outdated
Create components whose prop changes map to a global side effect
react-helmet 5.2.0 - 5.2.1Outdated
A document head manager for React
react-dnd 9.1.0 - 9.3.4Outdated
Drag and Drop for React
+2
jordangens
gaearon
darthtrevino
parse-srcset 1.0.0 - 1.0.2
A spec-conformant JavaScript parser for the HTML5 srcset attribute
albell
albell
rc-tooltip 5.2.0 - 5.2.2Outdated
React Tooltip
rc-slider 10.0.0Outdated
Slider UI component for React
@react-spring/core 9.2.0 - 9.2.1Outdated
The platform-agnostic core of `react-spring`
@ctrl/tinycolor 3.4.1Outdated
Fast, small color manipulation and conversion for JavaScript
xstate 4.7.0 - 4.35.2Outdated
Finite State Machines and Statecharts for the Modern Web.
@ant-design/colors 2.0.0 - 6.0.0Outdated
Color palettes calculator of Ant Design
+4
madccc
afc163
vthinkxie
antd 4.20.6Outdated
An enterprise-class UI design language and React components implementation
rc-motion 1.1.2Outdated
React lifecycle controlled motion library
async-validator 4.2.5
validate form asynchronous
react-modal 3.14.1 - 3.16.1
Accessible modal dialog component for React.JS
@ant-design/icons 4.6.3 - 4.7.0Outdated
[![NPM version](https://img.shields.io/npm/v/@ant-design/icons.svg?style=flat)](https://npmjs.org/package/@ant-design/icons) [![NPM downloads](http://img.shields.io/npm/dm/@ant-design/icons.svg?style=flat)](https://npmjs.org/package/@ant-design/icons)
+4
madccc
afc163
vthinkxie
d3-voronoi 1.0.2 - 1.1.4
Compute the Voronoi diagram of a set of two-dimensional points.
rc-resize-observer 1.2.0Outdated
Resize observer for React
d3-collection 1.0.4 - 1.0.7
Handy data structures for elements keyed by string.
rc-menu 9.6.4Outdated
menu ui component for react
rc-trigger 5.2.19Outdated
base abstract trigger component for react
rc-dropdown 3.0.0 - 4.0.1Outdated
dropdown ui component for react
rc-progress 3.3.3Outdated
progress ui component for react
rc-select 10.1.0Outdated
React Select
rc-align 4.0.12Outdated
align ui component for react
dom-align 1.12.3 - 1.12.4
Align DOM Node Flexibly
rc-pagination 3.1.16Outdated
pagination ui component for react
rc-dialog 8.9.0Outdated
dialog ui component for react
rc-collapse 3.3.1Outdated
rc-collapse ui component for react
@ant-design/icons-svg 4.2.0 - 4.2.1Outdated
Abstract nodes for ant design icons.
+4
madccc
afc163
vthinkxie
rc-notification 4.6.0Outdated
notification ui component for react
rc-picker 2.6.10Outdated
React date & time picker
rc-checkbox 2.3.2Outdated
checkbox ui component for react
react-copy-to-clipboard 5.1.0
Copy-to-clipboard React component
rc-field-form 1.27.2Outdated
React Form Component
redux-logger x.x.x
Logger for Redux
redux-devtools-extension 2.0.0 - 2.13.9
Wrappers for Redux DevTools Extension.
+1
jhen0409
methuselah96
timdorr
react-player 1.12.0 - 1.15.3Outdated
A React component for playing a variety of URLs, including file paths, YouTube, Facebook, Twitch, SoundCloud, Streamable, Vimeo, Wistia and DailyMotion
@babel/runtime-corejs2 7.0.0 - 7.20.7Outdated
babel's modular runtime helpers with core-js@2 polyfilling
+1
hzoo
existentialism
nicolo-ribaudo
rc-animate 2.11.1Outdated
css-transition ui component for react
react-motion 0.4.0 - 0.5.2
A spring that solves your animation problems.
connected-react-router 6.9.0 - 6.9.2Outdated
A Redux binding for React Router v4 and v5
supasate
supasate
lodash.isequalwith 4.4.0
The lodash method `_.isEqualWith` exported as a module.
bootstrap-vue 1.0.0 - 2.15.0Outdated
With more than 85 components, over 45 available plugins, several directives, and 1000+ icons, BootstrapVue provides one of the most comprehensive implementations of the Bootstrap v4 component and grid system available for Vue.js v2.6, complete with extens
react-loadable 5.5.0
A higher order component for loading components with promises
miksu
thejameskyle
deepcopy 2.0.0 - 2.1.0
deep copy data
sasaplus1
sasaplus1
react-image 2.2.2 - 2.4.0Outdated
React Image is an <img> tag replacement for react, featuring preloader and multiple image fallback support
react-amphtml 3.1.0 - 4.0.2
Use amphtml components inside your React apps easily!
dfrankland
dfrankland
rc-tree x.x.x
react-vis x.x.x
d3-contour x.x.x
d3-hexbin x.x.x
d3-sankey x.x.x
d3-hierarchy x.x.x
rc-overflow x.x.x
rc-input x.x.x
rc-virtual-list x.x.x
rc-tabs x.x.x
react-sanitized-html x.x.x
rc-drawer x.x.x
rc-switch x.x.x
lodash.maxby x.x.x
react-piwik x.x.x
rc-textarea x.x.x
math-interval-2 x.x.x
use-media x.x.x
rc-table x.x.x
idlejs x.x.x
number-abbreviate x.x.x
react-latex-next x.x.x
rc-upload x.x.x
@ant-design/react-slick x.x.x
rc-rate x.x.x
rc-footer x.x.x
axios-hooks x.x.x