About
Community
lbl.gov
47 packages
Last scanned on Oct 27 at 06:01 PM
Update
Name
Size
Popularity
Severity
lodash
4.17.16
Vulnerable
Outdated
Lodash modular utilities.
Script
https://www.lbl.gov/wp-includes/js/dist/components.min.js?ver=76c5a4c54d97b02824ed3d3b164c2811
License
MIT
Footprint
1 KB
Vulnerabilities
High
GHSA-p6mc-m468-83gw
Prototype Pollution in lodash
Affected versions >=0 <4.17.20
High
GHSA-35jh-r3h4-6jhm
Command Injection in lodash
Affected versions >=0 <4.17.21
Moderate
GHSA-29mw-wpgm-hmr9
Regular Expression Denial of Service (ReDoS) in lodash
Affected versions >=0 <4.17.21
Matched Modules
Version distribution in production
3 846
4.17.16
946
4.17.21
337
4.17.20
322
4.17.15
302
4.17.19
301
4.17.13
Also used on 4830 websites
skype.com
20 packages
cloudflare.com
116 packages
sentry.io
157 packages
pinterest.com
55 packages
Repository
Homepage
More
modules
stdlib
util
diff
2.0.2 - 2.2.1
Vulnerable
Outdated
A javascript text diff implementation.
diff
jsdiff
compare
patch
text
+3
kpdecker
react-is
16.3.0 - 16.13.1
Outdated
Brand checking of React Elements.
react
+1
inherits
2.0.4
Browser-friendly inheritance fully compatible with standard node.js inherits()
inheritance
class
klass
oop
object-oriented
+3
isaacs
@babel/runtime
7.13.6 - 7.20.0
Outdated
babel's modular runtime helpers
+1
get-intrinsic
1.1.2
Outdated
Get and robustly cache all JS language-level intrinsics at first require time
javascript
ecmascript
es
js
intrinsic
+2
ljharb
has-symbols
1.0.2 - 1.0.3
Determine if the JS environment has Symbol support. Supports spec, or shams.
Symbol
symbols
typeof
sham
polyfill
+3
ljharb
object-inspect
1.12.2
Outdated
string representations of objects in node and the browser
inspect
util.inspect
object
stringify
pretty
has
1.0.1 - 1.0.3
Object.prototype.hasOwnProperty.call shortcut
function-bind
1.1.0 - 1.1.1
Implementation of Function.prototype.bind
function
bind
shim
es5
call-bind
1.0.2
Robustly `.call.bind()` a function
javascript
ecmascript
es
js
callbind
+8
ljharb
define-properties
1.1.3 - 1.1.4
Outdated
Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.
Object.defineProperty
Object.defineProperties
object
property descriptor
descriptor
+2
ljharb
es-abstract
1.20.0 - 1.20.2
Outdated
ECMAScript spec abstract operations.
ECMAScript
ES
abstract
operation
abstract operation
+4
ljharb
core-js
3.23.0 - 3.26.0
Outdated
Standard library
ES3
ES5
ES6
ES7
ES2015
+39
zloirock
is-callable
1.2.0 - 1.2.4
Outdated
Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.
Function
function
callable
generator
generator function
+5
ljharb
object-keys
1.1.0 - 1.1.1
An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim
Object.keys
keys
ES5
shim
ljharb
object.assign
4.1.1 - 4.1.2
Outdated
ES6 spec-compliant Object.assign shim. From https://github.com/es-shims/es6-shim
Object.assign
assign
ES6
extend
$.extend
+6
ljharb
is-regex
1.1.4
Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag
regex
regexp
is
regular expression
regular
+1
ljharb
has-tostringtag
1.0.0
Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.
javascript
ecmascript
symbol
symbols
tostringtag
+1
ljharb
is-date-object
1.0.1 - 1.0.3
Outdated
Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
Date
ES6
toStringTag
@@toStringTag
Date object
ljharb
es-to-primitive
1.2.0 - 1.2.1
ECMAScript “ToPrimitive” algorithm. Provides ES5 and ES2015 versions.
primitive
abstract
ecmascript
es5
es6
+11
ljharb
has-property-descriptors
1.0.0
Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD.
property
descriptors
has
environment
env
+2
ljharb
object.values
1.0.0 - 1.1.5
Outdated
ES2017 spec-compliant Object.values shim.
Object.values
Object.keys
Object.entries
values
ES7
+8
ljharb
prop-types
15.8.0 - 15.8.1
Runtime type checking for React props and similar objects.
react
array.prototype.flat
1.3.0
Outdated
An ES2019 spec-compliant `Array.prototype.flat` shim/polyfill/replacement that works as far down as ES3.
Array.prototype.flatten
Array.prototype.flat
flatten
flat
array
+6
ljharb
hoist-non-react-statics
3.3.1 - 3.3.2
Copies non-react specific statics from a child component to a parent component
react
mridgway
classnames
2.3.0 - 2.3.1
Outdated
A simple utility for conditionally joining classNames together
react
css
classes
classname
classnames
+2
es5-ext
0.7.0 - 0.10.49
Outdated
ECMAScript extensions and shims
ecmascript
ecmascript5
ecmascript6
es5
es6
+11
medikoo
moment-timezone
0.5.35
Outdated
Parse and display moments in any timezone.
moment
date
time
timezone
olson
+3
+4
lodash-es
4.17.21
Lodash exported as ES modules.
es6
modules
stdlib
util
traverse
0.6.1 - 0.6.7
traverse and transform objects by visiting every node on a recursive walk
traverse
walk
recursive
map
forEach
+2
ljharb
consolidated-events
1.0.0 - 1.1.1
Outdated
Manage multiple event handlers using few event listeners
events
performance
lencioni
airbnb-prop-types
2.16.0
Custom React PropType validators that we use at Airbnb.
react
propTypes
airbnb
prop
types
+2
+1
clipboard
2.0.9 - 2.0.11
Modern copy to clipboard. No Flash. Just 2kb
clipboard
copy
cut
antd
4.20.0 - 4.20.6
Outdated
An enterprise-class UI design language and React components implementation
ant
component
components
design
framework
+4
+4
document.contains
1.0.2
Polyfill/shim for `document.contains`
contains
document
element
node
polyfill
+1
ljharb
react-outside-click-handler
1.3.0
A React component for dealing with clicks outside its subtree
+2
react-with-direction
1.0.0 - 1.4.0
Components to provide and consume RTL or LTR direction in React
+3
react-moment-proptypes
1.6.0 - 1.8.1
React proptype for moment module
moment
react
props
proptypes
react-with-styles
3.2.1 - 3.2.3
Outdated
[![Build Status][travis-svg]][travis-url] [![dependency status][deps-svg]][deps-url] [![dev dependency status][dev-deps-svg]][dev-deps-url] [![License][license-image]][license-url] [![Downloads][downloads-image]][downloads-url]
react
css
styles
aphrodite
radium
+4
react-dates
17.2.0
Outdated
A responsive and accessible date range picker component built with React
+4
react-with-styles-interface-css
4.0.0 - 4.0.3
Outdated
Interface for react-with-styles outputting CSS
react-with-styles
css-in-js
css
+2
global-cache
1.1.0 - 1.2.1
Sometimes you have to do horrible things, like use the global object to share a singleton. Abstract that away, with this!
global
window
self
cache
global object
ljharb
line-height
0.3.0 - 0.3.1
Calculate line-height of an HTML element (IE6 compatible)
line-height
lineHeight
getComputedStyle
css
twolfson
computed-style
0.1.0 - 0.3.0
Cross-browser currentStyle/getComputedStyle implementation
cross-browser
getComputedStyle
currentStyle
css
style
twolfson
dom-scroll-into-view
1.2.0 - 1.2.1
Outdated
scroll dom node into view automatically
dom
scrollIntoView
yiminghe
memize
1.1.0
Outdated
Unabashedly-barebones memoization library with an aim toward speed
memoize
memoization
memoisation
cache
aduth
Popular search queries
webpack.js.org
url
react-scripts
react
lottie-api
react-helmet-async
+8 packages
github.com
color-convert
engine.io-client
lit-html
intl-messageformat
web-vitals
+19 packages
pinterest.com
lodash
relay-runtime
react-query
react-relay
react-use
+50 packages
Popular packages
react
React is a JavaScript library for building user interfaces.
+6 634 websites
core-js
Standard library
+10 238 websites
es5-ext
ECMAScript extensions and shims
+10 229 websites
@babel/runtime
babel's modular runtime helpers
+8 352 websites
lodash
Lodash modular utilities.
+4 826 websites
axios
Promise based HTTP client for the browser and node.js
+4 742 websites