About
Community
nextjs.org
31 packages
Last scanned on Oct 29 at 08:06 PM
Update
Name
Size
Popularity
Severity
lodash
4.17.16
Vulnerable
Outdated
Lodash modular utilities.
Script
https://nextjs.org/_next/static/chunks/9823-08ce0f79691c5b22.js?dpl=dpl_GWgyVSdHCrYdH5TfBYmmG7pRiHi8
License
MIT
Footprint
1 KB
Vulnerabilities
High
GHSA-p6mc-m468-83gw
Prototype Pollution in lodash
Affected versions >=3.7.0 <4.17.19
High
GHSA-35jh-r3h4-6jhm
Command Injection in lodash
Affected versions >=0 <4.17.21
Moderate
GHSA-29mw-wpgm-hmr9
Regular Expression Denial of Service (ReDoS) in lodash
Affected versions >=0 <4.17.21
Matched Modules
Version distribution in production
3 846
4.17.16
946
4.17.21
337
4.17.20
322
4.17.15
302
4.17.19
301
4.17.13
Also used on 4830 websites
skype.com
20 packages
cloudflare.com
116 packages
sentry.io
157 packages
pinterest.com
55 packages
Repository
Homepage
More
modules
stdlib
util
sweetalert2
10.15.4 - 11.4.18
Vulnerable
Outdated
A beautiful, responsive, customizable and accessible (WAI-ARIA) replacement for JavaScript's popup boxes, supported fork of sweetalert
sweetalert
sweetalert2
alert
modal
popup
+4
escape-string-regexp
2.0.0
Outdated
Escape RegExp special characters
escape
regex
regexp
regular
expression
+3
sindresorhus
cookie
0.2.4 - 0.4.1
Outdated
HTTP server cookie parsing and serialization
cookie
cookies
dougwilson
scheduler
0.21.0 - 0.23.0
Cooperative scheduler for the browser environment.
react
+1
react
17.0.0 - 18.2.0
React is a JavaScript library for building user interfaces.
react
+1
get-value
1.2.1
Outdated
Use property paths like 'a.b.c' to get a nested value from an object. Even works when keys have dots in them (no other dot-prop library can do this!).
get
key
nested
object
path
+8
clsx
1.2.0 - 2.0.0
A tiny (234B) utility for constructing className strings conditionally.
classes
classname
classnames
lukeed
@emotion/is-prop-valid
0.8.8
Outdated
A function to check whether a prop is valid for HTML and SVG elements
+1
lodash-es
4.17.21
Lodash exported as ES modules.
es6
modules
stdlib
util
js-cookie
3.0.1 - 3.0.5
A simple, lightweight JavaScript API for handling cookies
cookie
cookies
browser
amd
commonjs
+3
copy-to-clipboard
3.3.0 - 3.3.1
Outdated
Copy stuff into clipboard using JS with fallbacks
clipboard
copy
browser
sudodoki
toggle-selection
1.0.5 - 1.0.6
Toggle current selected content in browser
selection
toggle
browser
deselect
sudodoki
aria-hidden
1.1.0 - 1.1.3
Outdated
Cast aria-hidden to everything, except...
DOM
aria
hidden
inert
kashey
framer-motion
7.3.1 - 8.1.5
Outdated
A simple and powerful JavaScript animation library
react animation
react
three
3d
pose
+8
+33
framesync
4.1.0 - 6.1.2
A frame-synced render loop for JavaScript
animation
raf
popmotion
@material-ui/core
1.5.1 - 4.12.4
React components that implement Google's Material Design.
react
react-component
material design
material-ui
popmotion
9.0.0 - 11.0.5
The animator's toolbox
animation
ux
ui
popmotion
canvas animation
+11
popmotion
style-value-types
4.1.0 - 4.1.5
Outdated
Parsers, transformers and tests for special value types, eg: %, hex codes etc.
css
svg
hex
rgba
hsla
popmotion
@react-aria/utils
3.0.0 - 3.21.1
Outdated
Spectrum UI components in React
lodash.deburr
4.1.0
The lodash method `_.deburr` exported as a module.
lodash-modularized
deburr
@react-aria/interactions
3.8.0 - 3.19.1
Outdated
Spectrum UI components in React
redux-persist
4.4.0 - 4.5.0
Outdated
persist and rehydrate redux stores
@reach/utils
0.4.0 - 0.6.1
Outdated
Internal, shared utilities for Reach UI.
+1
@react-aria/focus
3.5.1 - 3.5.5
Outdated
Spectrum UI components in React
@chakra-ui/hooks
1.5.3 - 1.7.1
Outdated
React hooks for Chakra components
hooks
react
chakra ui
utilities
@reach/portal
0.18.0
Declarative portals for React
+1
@splidejs/splide
4.0.0 - 4.1.4
Splide is a lightweight, flexible and accessible slider/carousel. No dependencies, no Lighthouse errors.
splide
slider
carousel
slideshow
gallery
+4
splidejs
styled-tools
1.1.0 - 1.5.0
Outdated
Utilities for styled-components
styled-tools
diegohaz
blurhash
2.0.1
Outdated
Encoder and decoder for the Wolt BlurHash algorithm.
blurhash
blur
hash
image
+2
js-component-framework
2.0.0 - 2.0.2
Outdated
A framework for configuring a JavaScript component and attaching it to a DOM element or collection of DOM elements, simplifying organization of DOM interactions on your website.
es6
Popular search queries
webpack.js.org
url
react-scripts
react
lottie-api
react-helmet-async
+7 packages
github.com
color-convert
engine.io-client
lit-html
intl-messageformat
web-vitals
+21 packages
pinterest.com
libphonenumber-js
react-relay
jss
@babel/runtime
redux-form
+50 packages
Popular packages
react
React is a JavaScript library for building user interfaces.
+6 634 websites
core-js
Standard library
+10 238 websites
es5-ext
ECMAScript extensions and shims
+10 229 websites
@babel/runtime
babel's modular runtime helpers
+8 352 websites
lodash
Lodash modular utilities.
+4 826 websites
axios
Promise based HTTP client for the browser and node.js
+4 742 websites