landr.com 167 packages

Last scanned on Jan 19 at 09:26 AM
lodash 4.17.16VulnerableOutdated
Lodash modular utilities.
License
MIT
Footprint
10 KB
Vulnerabilities
Command Injection in lodash
Affected versions >=0 <4.17.21
Regular Expression Denial of Service (ReDoS) in lodash
Affected versions >=0 <4.17.21
Prototype Pollution in lodash
Affected versions >=3.7.0 <4.17.19
Matched Modules
Version distribution in production
3 846
4.17.16
946
4.17.21
337
4.17.20
322
4.17.15
302
4.17.19
301
4.17.13
moment 2.19.0 - 2.25.1VulnerableOutdated
Parse, validate, manipulate, and display dates
es5-ext 0.10.24 - 0.10.49VulnerableOutdated
ECMAScript extensions and shims
debug 3.2.6 - 3.2.7Outdated
Lightweight debugging utility for Node.js and the browser
tslib 2.3.1Outdated
Runtime library for TypeScript helper functions
ms 2.1.2 - 2.1.3
Tiny millisecond conversion utility
+5
gdborton
matheuss
rauchg
uuid 7.0.0 - 8.0.0Outdated
RFC4122 (v1, v4, and v5) UUIDs
isarray 1.0.0 - 2.0.5
Array#isArray for older browsers
react-is 16.3.0 - 16.13.1Outdated
Brand checking of React Elements.
buffer 4.6.0 - 4.9.2Outdated
Node.js Buffer API, for the browser
regenerator-runtime 0.13.4 - 0.13.5Outdated
Runtime for Regenerator-compiled generator and async functions.
@babel/runtime 7.10.0 - 7.11.2Outdated
babel's modular runtime helpers
+1
hzoo
existentialism
nicolo-ribaudo
path-to-regexp 6.1.0Outdated
Express style path to RegExp utility
axios 0.26.1Outdated
Promise based HTTP client for the browser and node.js
fast-deep-equal 2.0.1Outdated
Fast deep equal
rxjs 6.5.3 - 6.5.4Outdated
Reactive Extensions for modern JavaScript
ieee754 1.1.0 - 1.2.1
Read/write IEEE754 floating point numbers from/to a Buffer or array-like object
object-assign 4.1.0 - 4.1.1
ES2015 `Object.assign()` ponyfill
base64-js 1.3.0 - 1.5.1
Base64 encoding/decoding in pure JS
fast-json-stable-stringify 2.0.0 - 2.1.0
deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify without jsonify
nanoid x.x.x
A tiny (116 bytes), secure URL-friendly unique string ID generator
deepmerge 4.2.2Outdated
A library for deep (recursive) merging of Javascript objects
core-js 3.6.5Outdated
Standard library
scheduler 0.16.0 - 0.18.0Outdated
Cooperative scheduler for the browser environment.
prop-types 15.7.0 - 15.7.2Outdated
Runtime type checking for React props and similar objects.
react 16.10.1Outdated
React is a JavaScript library for building user interfaces.
process x.x.x
process information for node.js and browsers
json-stringify-safe 5.0.1
Like JSON.stringify, but doesn't blow up on circular refs.
react-dom 16.10.1Outdated
React package for working with the DOM.
dayjs 1.8.17Outdated
2KB immutable date time library alternative to Moment.js with the same modern API
setimmediate x.x.x
A shim for the setImmediate efficient script yielding API
domenic
domenic
@emotion/memoize 0.6.1 - 0.7.4Outdated
emotion's memoize utility
+1
emmatown
tkh44
emotion-release-bot
hoist-non-react-statics 3.3.1 - 3.3.2
Copies non-react specific statics from a child component to a parent component
mridgway
mridgway
cross-fetch x.x.x
Universal WHATWG Fetch API for Node, Browsers and React Native
invariant 2.2.0 - 2.2.4
invariant
@emotion/unitless 0.7.2 - 0.8.0Outdated
An object of css properties that don't accept values with units
+1
emmatown
tkh44
emotion-release-bot
dequal 1.0.1Outdated
A tiny (304B to 489B) utility for check for deep equality
symbol-observable 1.2.0Outdated
Symbol.observable ponyfill
@emotion/is-prop-valid 0.8.8Outdated
A function to check whether a prop is valid for HTML and SVG elements
+1
emmatown
tkh44
emotion-release-bot
graphql 14.5.5 - 14.7.0Outdated
A Query Language and Runtime which can target any service.
react-transition-group 4.4.1 - 4.4.2Outdated
A react component toolset for managing animations
dom-helpers 3.4.0Outdated
tiny modular DOM lib for ie9+
@popperjs/core 2.4.4Outdated
Tooltip and Popover Positioning Engine
tiny-invariant 0.0.2 - 1.3.1Outdated
A tiny invariant function
lodash.clonedeep 4.5.0
The lodash method `_.cloneDeep` exported as a module.
memoize-one 5.2.0 - 5.2.1Outdated
A memoization library which only remembers the latest invocation
lodash-es 4.17.20 - 4.17.21
Lodash exported as ES modules.
redux 4.0.1 - 4.2.0Outdated
Predictable state container for JavaScript apps
react-fast-compare 3.1.0 - 3.2.0Outdated
Fastest deep equal comparison for React. Great for React.memo & shouldComponentUpdate. Also really fast general-purpose deep comparison.
warning 1.0.0 - 4.0.3
A mirror of Facebook's Warning
traverse 0.6.1 - 0.6.7Outdated
traverse and transform objects by visiting every node on a recursive walk
timers-browserify 2.0.6 - 2.0.12
timers module for browserify
crypto-browserify 1.0.9 - 2.0.0Outdated
implementation of crypto for the browser
+2
dcousens
ljharb
cwmma
js-cookie 3.0.1Outdated
A simple, lightweight JavaScript API for handling cookies
react-redux 7.2.5 - 7.2.7Outdated
Official React bindings for Redux
shallowequal 1.0.1 - 1.1.0
Like lodash isEqualWith but for shallow equal.
history 4.6.0 - 4.7.2Outdated
Manage session history with JavaScript
style-to-object 0.2.3 - 0.4.1Outdated
Parse CSS inline style to JavaScript object.
polished 1.0.0 - 4.2.2Outdated
A lightweight toolset for writing styles in Javascript.
serialize-error x.x.x
Serialize/deserialize an error into a plain object
graphql-tag 2.9.1 - 2.11.0Outdated
A JavaScript template literal tag that parses GraphQL queries
jnwng
abernix
apollo-bot
inline-style-parser 0.1.0 - 0.1.1Outdated
An inline style parser.
resize-observer-polyfill 1.5.1
A polyfill for the Resize Observer API
mitt 1.1.3 - 1.2.0Outdated
Tiny 200b functional Event Emitter / pubsub.
styled-components 4.0.0 - 5.3.6Outdated
CSS for the <Component> Age. Style components your way with speed, strong typing, and flexibility.
d3-timer 1.0.6 - 1.0.10Outdated
An efficient queue capable of managing thousands of concurrent animations.
d3-ease 1.0.1 - 1.0.6Outdated
Easing functions for smooth animation.
@emotion/stylis 0.8.2 - 0.8.5
A custom build of Stylis
+1
emmatown
tkh44
emotion-release-bot
zen-observable-ts x.x.x
Thin wrapper around zen-observable and @types/zen-observable, to support ESM exports as well as CommonJS exports
jbaxleyiii
apollo-bot
ts-invariant 0.1.0 - 0.2.1Outdated
TypeScript implementation of invariant(condition, message)
zen-observable 0.8.11 - 0.8.14Outdated
An Implementation of ES Observables
zenparsing
zenparsing
compute-scroll-into-view 1.0.17Outdated
The engine that powers scroll-into-view-if-needed
@wry/equality 0.1.8 - 0.1.11Outdated
Structural equality checking for JavaScript values
benjamn
benjamn
tabbable 5.1.0 - 5.1.2Outdated
Returns an array of all tabbable DOM nodes within a containing node.
davidtheclark
stefcameron
@wry/context 0.4.0 - 0.6.1Outdated
Manage contextual information needed by (a)synchronous tasks without explicitly passing objects around
benjamn
benjamn
optimism 0.9.0 - 0.11.4Outdated
Composable reactive caching with efficient invalidation.
react-scripts 0.4.2Outdated
Configuration and scripts for Create React App.
+1
fb
timer
iansu
scroll-into-view-if-needed 2.2.20 - 2.2.28Outdated
Ponyfill for upcoming Element.scrollIntoView() APIs like scrollMode: if-needed, behavior: smooth and block: center
css-box-model 0.0.7 - 1.2.1
Get accurate and well named css box model information about an Element 📦
exenv 1.1.0 - 1.2.2
React's ExecutionEnvironment module extracted for use in other packages & components
swr 0.3.9Outdated
React Hooks library for remote data fetching
raf-schd 4.0.1 - 4.0.3
A scheduler based on requestAnimationFrame
use-memo-one 1.1.2 - 1.1.3
useMemo and useCallback but with a stable cache
react-side-effect 2.1.0 - 2.1.2
Create components whose prop changes map to a global side effect
react-helmet 6.0.0 - 6.1.0
A document head manager for React
react-dnd 8.0.0 - 14.0.5Outdated
Drag and Drop for React
+2
jordangens
gaearon
darthtrevino
react-resize-detector 7.1.0 - 7.1.2Outdated
React resize detector
react-beautiful-dnd 13.0.0 - 13.1.1
Beautiful and accessible drag and drop for lists with React
focus-trap 6.1.2 - 6.1.4Outdated
Trap focus within a DOM node.
downshift 6.0.12 - 6.1.7Outdated
🏎 A set of primitives to build simple, flexible, WAI-ARIA compliant React autocomplete, combobox or select dropdown components.
apollo-utilities 1.0.0 - 1.3.4
Utilities for working with GraphQL ASTs
+1
apollo-bot
benjamn
jbaxleyiii
html-react-parser 0.13.0 - 0.14.1Outdated
HTML to React parser.
html-dom-parser x.x.x
HTML to DOM parser.
apollo-link 1.2.12 - 1.2.14
Flexible, lightweight transport layer for GraphQL
jbaxleyiii
peggyrayzis
apollo-bot
load-script 1.0.0 - 2.0.0
Dynamic script loading for browser
react-property 1.0.1 - 1.0.2Outdated
HTML and SVG DOM property configs used by React.
react-slick 0.24.0 - 0.27.10Outdated
React port of slick carousel
svelte 3.40.0 - 3.55.1Outdated
Cybernetically enhanced web apps
react-player 2.10.1Outdated
A React component for playing a variety of URLs, including file paths, YouTube, Facebook, Twitch, SoundCloud, Streamable, Vimeo, Wistia and DailyMotion
apollo-link-http-common 0.0.0 - 0.2.16
Http utilities for Apollo Link shared across all links using http
body-scroll-lock 3.0.2 - 3.1.3Outdated
Enables body scroll locking (for iOS Mobile and Tablet, Android, desktop Safari/Chrome/Firefox) without breaking scrolling of a target element (eg. modal/lightbox/flyouts/nav-menus)
apollo-link-http 1.5.12 - 1.5.17
HTTP transport layer for GraphQL
apollo-bot
apollo-bot
@auth0/auth0-spa-js 1.13.1 - 1.22.6Outdated
Auth0 SDK for Single Page Applications using Authorization Code Grant Flow with PKCE
@reach/router 1.3.3 - 1.3.4
Next generation Routing for React.
focus-trap-react 7.0.0 - 8.1.0Outdated
A React component that traps focus.
apollo-link-error 1.1.11 - 1.1.13
Error Apollo Link for GraphQL Network Stack
apollo-bot
apollo-bot
apollo-cache 1.1.22 - 1.3.5
Core abstract of Caching layer for Apollo Client
+3
apollo-bot
benjamn
jbaxleyiii
@styled-system/core 5.0.2 - 5.1.2
jxnblk
jxnblk
styled-system 5.0.0 - 5.1.5
Responsive, theme-based style props for building design systems with React
apollo-link-context 1.0.15 - 1.0.20
An easy way to set and cache context changes for Apollo Link
jbaxleyiii
peggyrayzis
apollo-bot
@styled-system/css 5.0.10 - 5.1.5
Styled System for the `css` prop
@styled-system/color 5.0.0 - 5.1.2
jxnblk
jxnblk
apollo-client 0.5.19 - 2.6.10
A simple yet functional GraphQL client.
apollo-cache-inmemory 1.6.3 - 1.6.6
Core abstract of Caching layer for Apollo Client
+1
apollo-bot
benjamn
jbaxleyiii
@styled-system/border 5.1.5
jxnblk
jxnblk
@styled-system/layout 5.0.23 - 5.1.2
jxnblk
jxnblk
@styled-system/variant 5.1.0 - 5.1.5
Read the docs: https://styled-system.com/variants
jxnblk
jxnblk
@styled-system/space 5.0.0 - 5.1.2
jxnblk
jxnblk
@styled-system/typography 5.0.0 - 5.1.2
jxnblk
jxnblk
@styled-system/position 5.0.15 - 5.1.2
jxnblk
jxnblk
@styled-system/flexbox 5.0.0 - 5.1.2
jxnblk
jxnblk
@styled-system/grid 5.0.0 - 5.1.2
jxnblk
jxnblk
@styled-system/background 5.0.0 - 5.1.2
jxnblk
jxnblk
@styled-system/shadow 5.0.0 - 5.1.2
jxnblk
jxnblk
@amplitude/ua-parser-js 0.7.31Outdated
Detect Browser, Engine, OS, CPU, and Device type/model from User-Agent data. Supports browser & node.js environment
gsap 3.3.0 - 3.10.4Outdated
GSAP is a framework-agnostic JavaScript animation library that turns developers into animation superheroes. Build high-performance animations that work in **every** major browser. Animate CSS, SVG, canvas, React, Vue, WebGL, colors, strings, motion paths,
@hotwired/turbo 7.0.0 - 7.2.4Outdated
The speed of a single-page web application without having to write any JavaScript
sister 3.0.1 - 3.0.2
Event manager.
gajus
gajus
youtube-player 4.2.0 - 5.5.2Outdated
YouTube IFrame Player API abstraction.
gatsby 2.15.23 - 5.4.2Outdated
Blazing fast modern site generator for React
react-youtube 7.9.0Outdated
React.js powered YouTube player component
gatsby-link 2.1.0 - 2.4.3Outdated
An enhanced Link component for Gatsby sites with support for resource prefetching
gatsby-react-router-scroll 2.1.8 - 2.1.19Outdated
React Router scroll management forked from https://github.com/ytase/react-router-scroll for Gatsby
shallow-compare 1.2.1 - 1.2.2
Stand alone shallowCompare for use in libraries that support shouldComponentUpdate
@lingui/core 3.13.2 - 3.14.0Outdated
I18n tools for javascript
wicg-inert x.x.x
A polyfill for the proposed inert API
graphql-anywhere 3.1.0 - 4.1.28Outdated
Run GraphQL queries with no schema and just one resolver
deepcopy 2.0.0 - 2.1.0
deep copy data
sasaplus1
sasaplus1
apollo-boost 0.3.0 - 0.3.1Outdated
The easiest way to get started with Apollo Client
+1
apollo-bot
benjamn
jbaxleyiii
@lingui/react 3.6.0 - 3.16.0Outdated
React components for translations
react-move 6.0.0 - 6.5.0
Beautiful, data-driven animations for React.
nuka-carousel 4.7.1Outdated
Pure React Carousel
scroll-behavior 0.9.11 - 0.10.0Outdated
Pluggable browser scroll management
taion
taion
kapellmeister 2.0.2 - 3.0.1
Orchestration For Animated Transitions
nodelist-foreach-polyfill x.x.x
Simple polyfill for the NodeList.forEach method.
gatsby-image 2.2.15 - 2.2.25Outdated
Lazy-loading React image component with optional support for the blur-up effect.
@mikaelkristiansson/domready 1.0.9Outdated
modern domready
mikaelkristiansson87
mikaelkristiansson87
apollo-link-state 0.4.2
An easy way to manage local state with Apollo Link
jbaxleyiii
peggyrayzis
apollo-bot
prismic-javascript 2.7.1Outdated
JavaScript development kit for prismic.io
prismic-dom 2.1.0 - 2.1.3Outdated
Set of helpers to manage Prismic data
+3
amaurycahuet
arnaudlewis
hypervillain
web-speech-cognitive-services 4.0.0Outdated
Polyfill Web Speech API with Cognitive Services Speech-to-Text service
feathers-commons 0.8.5 - 0.8.7
Shared Feathers utility functions
@landr/maestro x.x.x
smooth-scroll-into-view-if-needed x.x.x
react-use-gesture x.x.x
@landr/pricing x.x.x
react-extras x.x.x
@landr/core.models x.x.x
@landr/core x.x.x
howler x.x.x
gatsby-source-prismic-graphql x.x.x
@landr/react-player x.x.x
make-plural x.x.x
flag x.x.x
currency.js x.x.x
gatsby-source-graphql-universal x.x.x
deep-computed x.x.x