About
Community
kombo.co
93 packages
Last scanned on Nov 1 at 02:28 PM
Update
Name
Size
Popularity
Severity
lodash
4.17.16
Vulnerable
Outdated
Lodash modular utilities.
Script
https://kombo.co/_next/static/chunks/pages/_app-2f13a5b1823fbd7b.js
License
MIT
Footprint
1 KB
Vulnerabilities
High
GHSA-35jh-r3h4-6jhm
Command Injection in lodash
Affected versions >=0 <4.17.21
Moderate
GHSA-29mw-wpgm-hmr9
Regular Expression Denial of Service (ReDoS) in lodash
Affected versions >=0 <4.17.21
High
GHSA-p6mc-m468-83gw
Prototype Pollution in lodash
Affected versions >=3.7.0 <4.17.19
Matched Modules
Version distribution in production
3 846
4.17.16
946
4.17.21
337
4.17.20
322
4.17.15
302
4.17.19
301
4.17.13
Also used on 4830 websites
skype.com
20 packages
sentry.io
157 packages
pinterest.com
56 packages
pinimg.com
52 packages
Repository
Homepage
More
modules
stdlib
util
next
12.0.8 - 12.0.10
Vulnerable
Outdated
The React Framework
readable-stream
3.6.0
Outdated
Node.js Streams, a user-land copy of the stream library from Node.js
readable
stream
pipe
string_decoder
1.1.0 - 1.3.0
The string_decoder module from Node core
string
decoder
browser
browserify
+1
isarray
0.0.0 - 2.0.5
Array#isArray for older browsers
browser
isarray
array
juliangruber
react-is
16.3.0 - 16.13.1
Outdated
Brand checking of React Elements.
react
+1
inherits
2.0.3 - 2.0.4
Browser-friendly inheritance fully compatible with standard node.js inherits()
inheritance
class
klass
oop
object-oriented
+3
isaacs
buffer
4.6.0 - 4.9.2
Outdated
Node.js Buffer API, for the browser
arraybuffer
browser
browserify
buffer
compatible
+2
feross
@babel/runtime
7.18.2 - 7.20.0
Outdated
babel's modular runtime helpers
+1
get-intrinsic
1.1.2
Outdated
Get and robustly cache all JS language-level intrinsics at first require time
javascript
ecmascript
es
js
intrinsic
+2
ljharb
function-bind
1.1.0 - 1.1.1
Outdated
Implementation of Function.prototype.bind
function
bind
shim
es5
path-to-regexp
1.7.0 - 6.2.0
Outdated
Express style path to RegExp utility
express
regexp
route
routing
+2
axios
0.21.4
Outdated
Promise based HTTP client for the browser and node.js
xhr
http
ajax
promise
node
+1
cookie
0.4.1 - 0.4.2
Outdated
HTTP server cookie parsing and serialization
cookie
cookies
dougwilson
call-bind
1.0.2
Outdated
Robustly `.call.bind()` a function
javascript
ecmascript
es
js
callbind
+8
ljharb
object-inspect
1.12.2
Outdated
string representations of objects in node and the browser
inspect
util.inspect
object
stringify
pretty
has-symbols
1.0.2 - 1.0.3
Determine if the JS environment has Symbol support. Supports spec, or shams.
Symbol
symbols
typeof
sham
polyfill
+3
ljharb
has-property-descriptors
1.0.0
Outdated
Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD.
property
descriptors
has
environment
env
+2
ljharb
es-abstract
1.20.0 - 1.20.2
Outdated
ECMAScript spec abstract operations.
ECMAScript
ES
abstract
operation
abstract operation
+4
ljharb
base64-js
1.3.0 - 1.5.1
Base64 encoding/decoding in pure JS
base64
define-properties
1.1.4
Outdated
Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.
Object.defineProperty
Object.defineProperties
object
property descriptor
descriptor
+2
ljharb
is-callable
1.2.4
Outdated
Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.
Function
function
callable
generator
generator function
+5
ljharb
has-tostringtag
1.0.0
Outdated
Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.
javascript
ecmascript
symbol
symbols
tostringtag
+1
ljharb
events
3.0.0 - 3.3.0
Node's event emitter for all engines.
events
eventEmitter
eventDispatcher
listeners
array-flatten
2.0.0 - 2.1.2
Outdated
Flatten nested arrays
array
flatten
arguments
depth
fast
+1
blakeembrey
deepmerge
1.5.2
Outdated
A library for deep (recursive) merging of Javascript objects
merge
deep
extend
copy
clone
+1
tehshrike
object-keys
1.1.0 - 1.1.1
An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim
Object.keys
keys
ES5
shim
ljharb
is-regex
1.1.4
Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag
regex
regexp
is
regular expression
regular
+1
ljharb
retry
0.13.1
Abstraction for exponential and custom retry strategies for failed operations.
tim-kos
is-date-object
1.0.5
Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
Date
ES6
toStringTag
@@toStringTag
Date object
ljharb
util
0.10.0 - 0.12.5
Node.js's util module for all engines
util
+3
es-to-primitive
1.2.0 - 1.2.1
ECMAScript “ToPrimitive” algorithm. Provides ES5 and ES2015 versions.
primitive
abstract
ecmascript
es5
es6
+11
ljharb
functions-have-names
1.1.1 - 1.2.3
Does this JS environment support the `name` property on functions?
function
name
es5
names
functions
+1
ljharb
function.prototype.name
1.1.2 - 1.1.5
Outdated
An ES2015 spec-compliant `Function.prototype.name` shim
Function.prototype.name
function
name
ES6
ES2015
+3
ljharb
object.values
1.0.0 - 1.1.5
Outdated
ES2017 spec-compliant Object.values shim.
Object.values
Object.keys
Object.entries
values
ES7
+8
ljharb
has
1.0.1 - 1.0.3
Outdated
Object.prototype.hasOwnProperty.call shortcut
tarruda
scheduler
0.15.0 - 0.23.0
Cooperative scheduler for the browser environment.
react
+1
array.prototype.flat
1.3.0
Outdated
An ES2019 spec-compliant `Array.prototype.flat` shim/polyfill/replacement that works as far down as ES3.
Array.prototype.flatten
Array.prototype.flat
flatten
flat
array
+6
ljharb
prop-types
15.8.0 - 15.8.1
Runtime type checking for React props and similar objects.
react
react
17.0.0 - 18.2.0
React is a JavaScript library for building user interfaces.
react
+1
performance-now
0.1.3 - 2.1.0
Implements performance.now (based on process.hrtime).
meryn
date-fns
2.27.0 - 2.28.0
Outdated
Modern JavaScript date utility library
kossnocorp
object-is
1.1.0 - 1.1.5
Outdated
ES2015-compliant shim for Object.is - differentiates between -0 and +0
is
Object.is
equality
sameValueZero
ES6
+4
ljharb
hoist-non-react-statics
3.3.1 - 3.3.2
Copies non-react specific statics from a child component to a parent component
react
mridgway
classnames
2.3.0 - 2.3.1
Outdated
A simple utility for conditionally joining classNames together
react
css
classes
classname
classnames
+2
ramda
0.25.0 - 0.27.2
Outdated
A practical functional library for JavaScript programmers.
ramda
functional
utils
utilities
toolkit
+6
+5
tiny-invariant
0.0.2 - 1.3.1
Outdated
A tiny invariant function
invariant
error
assert
asserts
alexreardon
memoize-one
5.1.0 - 5.1.1
Outdated
A memoization library which only remembers the latest invocation
memoize
memoization
cache
performance
alexreardon
react-router
5.1.1 - 5.3.4
Outdated
Declarative routing for React
react
router
route
routing
history
+1
lodash-es
4.17.21
Lodash exported as ES modules.
es6
modules
stdlib
util
react-fast-compare
2.0.4
Outdated
Fastest deep equal comparison for React. Great for React.memo & shouldComponentUpdate. Also really fast general-purpose deep comparison.
fast
equal
react
compare
shouldComponentUpdate
+1
+12
history
4.0.0 - 4.10.1
Outdated
Manage session history with JavaScript
history
location
mjackson
raf
1.0.0 - 3.4.1
requestAnimationFrame polyfill for node and the browser
requestAnimationFrame
polyfill
async-retry
1.3.3
Retrying made simple, easy and async
+3
toposort
2.0.2
Topological sort of directed ascyclic graphs (like dependecy lists)
topological
sort
sorting
graphs
graph
+4
marcelklehr
react-remove-scroll
2.2.0 - 2.5.5
Outdated
Disables scroll outside of `children` node.
scroll
kashey
p-is-promise
3.0.0 - 4.0.0
Check if something is a promise
promise
is
detect
check
kind
+7
sindresorhus
property-expr
2.0.5
Outdated
tiny util for getting and setting deep object props safely
expr
expression
setter
getter
deep
+3
monastic.panic
synchronous-promise
2.0.0 - 2.0.16
Outdated
Synchronous Promise-like prototype to use in testing where you would have used an ES6 Promise
fluffynuts
framer-motion
2.9.0 - 2.9.5
Outdated
A simple and powerful JavaScript animation library
react animation
react
three
3d
pose
+8
+36
react-i18next
11.17.2 - 11.17.4
Outdated
Internationalization for react done right. Using the i18next i18n ecosystem.
i18next
internationalization
i18n
translation
localization
+4
rc-util
4.20.3 - 5.3.0
Outdated
Common Utils For React Component
react
util
+6
date-fns-tz
1.3.0 - 1.3.7
Outdated
Time zone support for date-fns v3 with the Intl API
date-fns
timezone
time zone
date
time
+3
marnusw
formik
2.2.7 - 2.2.9
Outdated
Build forms in React, without the tears
formik
form
forms
react
react-dom
+7
jaredpalmer
enzyme-shallow-equal
1.0.4
Outdated
Adaptation of react-addons-shallow-compare, for independent usage
javascript
shallow rendering
shallowRender
test
reactjs
+7
+1
@headlessui/react
1.3.0 - 1.4.3
Outdated
A set of completely unstyled, fully accessible UI components for React, designed to integrate beautifully with Tailwind CSS.
+1
create-react-class
15.7.0
Legacy API for creating React components.
react
airbnb-prop-types
2.16.0
Custom React PropType validators that we use at Airbnb.
react
propTypes
airbnb
prop
types
+2
+1
universal-cookie
4.0.1 - 4.0.4
Outdated
Universal cookies for JavaScript
universal
isomophic
cookie
exon
consolidated-events
1.0.0 - 1.1.1
Outdated
Manage multiple event handlers using few event listeners
events
performance
lencioni
use-subscription
1.3.0 - 1.5.1
Outdated
Reusable hooks
+1
@chakra-ui/utils
1.4.0 - 2.0.11
Outdated
Common utilities and types for Chakra UI
smoothscroll-polyfill
0.4.4
Smooth Scroll behavior polyfill
smooth
scroll
CSSOM
polyfill
sweetalert2
8.11.5 - 11.4.18
Outdated
A beautiful, responsive, customizable and accessible (WAI-ARIA) replacement for JavaScript's popup boxes, supported fork of sweetalert
sweetalert
sweetalert2
alert
modal
popup
+4
document.contains
1.0.2
Polyfill/shim for `document.contains`
contains
document
element
node
polyfill
+1
ljharb
react-outside-click-handler
1.3.0
A React component for dealing with clicks outside its subtree
+2
react-moment-proptypes
1.6.0 - 1.8.1
React proptype for moment module
moment
react
props
proptypes
react-with-direction
1.0.0 - 1.4.0
Components to provide and consume RTL or LTR direction in React
+4
react-with-styles
4.2.0
Outdated
[![Build Status][travis-svg]][travis-url] [![dependency status][deps-svg]][deps-url] [![dev dependency status][dev-deps-svg]][dev-deps-url] [![License][license-image]][license-url] [![Downloads][downloads-image]][downloads-url]
react
css
styles
aphrodite
radium
+4
+1
react-dates
21.8.0
A responsive and accessible date range picker component built with React
+4
react-with-styles-interface-css
6.0.0
Interface for react-with-styles outputting CSS
react-with-styles
css-in-js
css
+3
global-cache
1.1.0 - 1.2.1
Sometimes you have to do horrible things, like use the global object to share a singleton. Abstract that away, with this!
global
window
self
cache
global object
ljharb
next-seo
4.7.0 - 5.5.0
Outdated
SEO plugin for Next.js projects
next.js
seo
react
node
ssr
garymeehan
react-gtm-module
2.0.9 - 2.0.11
React Google Tag Manager Module
react
reactjs
react-component
google tag manager
tag manager
+1
alinemorelli
@bugsnag/plugin-react
7.2.1 - 7.18.0
Outdated
React integration for @bugsnag/js
+6
react-instantsearch-dom
5.2.0 - 5.3.2
Outdated
⚡ Lightning-fast search for React DOM, by Algolia
algolia
components
fast
instantsearch
react
+2
+2
mailcheck
1.1.1
A standalone module that suggests a right domain when your users misspell it in an email address.
form
email
spell check
react-tracking
9.2.1
Outdated
Declarative tracking for React apps.
declarative
layer
metrics
nyt
react
+1
tizmagik
redux-beacon
2.1.0
Analytics integration for Redux and ngrx/store
redux-beacon
redux
analytics
redux-analytics
redux-gtm
+2
ttmarek
react-facebook
4.1.1 - 5.0.3
Outdated
Facebook components like a Login button, Like, Share, Comments, Embedded Post/Video, Messenger Chat and others
react
react-component
facebook
login
login button
+12
zlatkofedor
botframework-webchat
0.10.3 - 0.15.0
Outdated
A highly-customizable web-based chat client for Azure Bot Services.
+5
@redux-beacon/google-tag-manager
1.0.1
Google Tag Manager integration for Redux
ttmarek
botframework-webchat-component
4.9.2 - 4.15.4
Outdated
React component of botframework-webchat
+2
Popular search queries
webpack.js.org
url
react-scripts
react
lottie-api
react-helmet-async
+7 packages
github.com
color-convert
@headlessui/react
hoist-non-react-statics
reactstrap
lit-html
+60 packages
pinterest.com
lodash
relay-runtime
react-relay
react-use
lodash-es
+51 packages
Popular packages
react
React is a JavaScript library for building user interfaces.
+6 634 websites
core-js
Standard library
+10 238 websites
es5-ext
ECMAScript extensions and shims
+10 229 websites
@babel/runtime
babel's modular runtime helpers
+8 352 websites
lodash
Lodash modular utilities.
+4 826 websites
axios
Promise based HTTP client for the browser and node.js
+4 742 websites