nu.edu 136 packages

Last scanned on Jan 19 at 08:52 AM
lodash-es 3.9.0 - 4.5.1VulnerableOutdated
Lodash exported as ES modules.
License
MIT
Vulnerabilities
Prototype Pollution in lodash
Affected versions >=0 <4.17.14
Regular Expression Denial of Service (ReDoS) in lodash
Affected versions >=0 <4.17.11
Command Injection in lodash
Affected versions >=0 <4.17.21
Regular Expression Denial of Service (ReDoS) in lodash
Affected versions >=0 <4.17.21
Prototype Pollution in lodash
Affected versions >=3.7.0 <4.17.20
Version distribution in production
3 519
4.17.21
1 221
4.17.20
526
4.10.0
420
4.17.11
419
4.17.15
79
4.5.1
yaml 2.0.0 - 2.2.1VulnerableOutdated
JavaScript parser and stringifier for YAML
moment-timezone 0.5.31VulnerableOutdated
Parse and display moments in any timezone.
next 7.0.0 - 13.1.2VulnerableOutdated
The React Framework
rauchg
timneutkens
vercel-release-bot
tslib 2.3.0Outdated
Runtime library for TypeScript helper functions
uuid 8.3.0 - 8.3.1Outdated
RFC4122 (v1, v4, and v5) UUIDs
react-is 16.8.4Outdated
Brand checking of React Elements.
@babel/runtime 7.14.6 - 7.16.3Outdated
babel's modular runtime helpers
+1
hzoo
existentialism
nicolo-ribaudo
get-intrinsic 1.0.2Outdated
Get and robustly cache all JS language-level intrinsics at first require time
function-bind 1.1.1Outdated
Implementation of Function.prototype.bind
lodash 4.17.21
Lodash modular utilities.
sprintf-js 1.1.1Outdated
JavaScript sprintf implementation
alexei
alexei
call-bind 1.0.0Outdated
Robustly `.call.bind()` a function
has-symbols 1.0.0Outdated
Determine if the JS environment has Symbol support. Supports spec, or shams.
es-abstract 1.17.0 - 1.20.1Outdated
ECMAScript spec abstract operations.
define-properties 1.1.3Outdated
Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.
is-callable 1.1.4 - 1.1.5Outdated
Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.
object.assign 4.1.0Outdated
ES6 spec-compliant Object.assign shim. From https://github.com/es-shims/es6-shim
object-keys 1.1.1
An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim
deepmerge 1.5.2Outdated
A library for deep (recursive) merging of Javascript objects
domelementtype 2.1.0Outdated
all the types of nodes in htmlparser2's dom
is-regex 1.0.4Outdated
Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag
is-date-object 1.0.1Outdated
Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
is-symbol 1.0.0 - 1.0.1Outdated
Determine if a value is an ES6 Symbol or not.
es-to-primitive 1.1.1Outdated
ECMAScript “ToPrimitive” algorithm. Provides ES5 and ES2015 versions.
function.prototype.name 1.1.3 - 1.1.4Outdated
An ES2015 spec-compliant `Function.prototype.name` shim
functions-have-names 1.2.1 - 1.2.2Outdated
Does this JS environment support the `name` property on functions?
object.values 1.1.2 - 1.1.3Outdated
ES2017 spec-compliant Object.values shim.
has 1.0.2 - 1.0.3Outdated
Object.prototype.hasOwnProperty.call shortcut
tarruda
tarruda
array.prototype.flat 1.2.1Outdated
An ES2019 spec-compliant `Array.prototype.flat` shim/polyfill/replacement that works as far down as ES3.
prop-types 15.7.0 - 15.7.2Outdated
Runtime type checking for React props and similar objects.
performance-now x.x.x
Implements performance.now (based on process.hrtime).
meryn
meryn
object-is 1.0.2Outdated
ES2015-compliant shim for Object.is - differentiates between -0 and +0
@emotion/memoize 0.6.6 - 0.7.4Outdated
emotion's memoize utility
+1
emmatown
tkh44
emotion-release-bot
hoist-non-react-statics 3.3.2
Copies non-react specific statics from a child component to a parent component
mridgway
mridgway
table 6.2.0 - 6.8.1Outdated
Formats data into a string table.
@emotion/unitless 0.7.2 - 0.7.5Outdated
An object of css properties that don't accept values with units
+1
emmatown
tkh44
emotion-release-bot
classnames 2.3.0 - 2.3.1Outdated
A simple utility for conditionally joining classNames together
stylis 4.0.13Outdated
A Light–weight CSS Preprocessor
andarist
thysultan
@emotion/is-prop-valid 1.1.1Outdated
A function to check whether a prop is valid for HTML and SVG elements
+1
emmatown
tkh44
emotion-release-bot
ua-parser-js 0.7.24Outdated
Detect Browser, Engine, OS, CPU, and Device type/model from User-Agent & Client Hints data. Supports browser & node.js environment
@emotion/hash 0.8.0Outdated
A MurmurHash2 implementation
+1
emmatown
tkh44
emotion-release-bot
@emotion/serialize 1.0.2Outdated
serialization utils for emotion
+1
emmatown
tkh44
emotion-release-bot
@popperjs/core 2.6.0Outdated
Tooltip and Popover Positioning Engine
@emotion/utils 1.0.0Outdated
internal utils for emotion
+1
emmatown
tkh44
emotion-release-bot
postcss-merge-longhand 5.0.6 - 5.1.7Outdated
Merge longhand properties into shorthand with PostCSS.
@floating-ui/dom 0.4.5Outdated
Floating UI for the web
@floating-ui/core 0.6.2Outdated
Positioning library for floating elements: tooltips, popovers, dropdowns, and more
@emotion/cache 11.7.1Outdated
emotion's cache
+1
emmatown
tkh44
emotion-release-bot
@emotion/sheet 1.1.0Outdated
emotion's stylesheet
+1
emmatown
tkh44
emotion-release-bot
is-promise 2.2.1 - 4.0.0
Test whether an object looks like a promises-a+ promise
forbeslindesay
then-bot
redux 4.1.1 - 4.1.2Outdated
Predictable state container for JavaScript apps
colord 2.5.0 - 2.9.3
👑 A tiny yet powerful tool for high-performance color manipulations and conversions
es6-promise 3.3.0 - 4.2.3Outdated
A lightweight library that provides tools for organizing asynchronous code
@testing-library/user-event 13.0.14 - 13.5.0Outdated
Fire events the same way the user does
crypto-browserify 1.0.9 - 2.0.0Outdated
implementation of crypto for the browser
+2
dcousens
ljharb
cwmma
@emotion/react 11.7.1Outdated
> Simple styling in React.
+1
emmatown
tkh44
emotion-release-bot
react-redux 5.0.0 - 7.2.9Outdated
Official React bindings for Redux
raf 3.4.0 - 3.4.1
requestAnimationFrame polyfill for node and the browser
mdast-util-to-hast 2.0.0 - 12.2.5Outdated
mdast utility to transform to hast
@emotion/styled 11.6.0Outdated
styled API for emotion
+1
emmatown
tkh44
emotion-release-bot
resize-observer-polyfill 1.0.0 - 1.2.1Outdated
A polyfill for the Resize Observer API
styled-components 0.0.1 - 0.0.6Outdated
CSS for the <Component> Age. Style components your way with speed, strong typing, and flexibility.
libphonenumber-js 1.4.8 - 1.10.18Outdated
A simpler (and smaller) rewrite of Google Android's libphonenumber library in javascript
synchronous-promise 1.0.0 - 2.0.16Outdated
Synchronous Promise-like prototype to use in testing where you would have used an ES6 Promise
fluffynuts
fluffynuts
compute-scroll-into-view 1.0.15 - 1.0.16Outdated
The engine that powers scroll-into-view-if-needed
@formatjs/ecma402-abstract 1.0.3 - 1.14.3Outdated
A collection of implementation for ECMAScript abstract operations
framer-motion 6.2.8Outdated
A simple and powerful JavaScript animation library
web-vitals 3.0.0 - 3.0.4Outdated
Easily measure performance metrics in JavaScript
@angular/core 8.0.0 - 12.2.16Outdated
Angular - the core framework
angular
google-wombot
@angular/common 10.0.0 - 15.1.1Outdated
Angular - commonly needed directives and services
angular
google-wombot
@emotion/css 11.0.0 - 11.9.0Outdated
The Next Generation of CSS-in-JS.
foreach 2.0.4 - 2.0.6
foreach component + npm package
xss 0.1.15 - 1.0.14Outdated
Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
fp-ts 1.7.0 - 1.15.1Outdated
Functional programming in TypeScript
framesync 6.0.1 - 6.1.0Outdated
A frame-synced render loop for JavaScript
popmotion
popmotion
enzyme-shallow-equal 1.0.0 - 1.0.4Outdated
Adaptation of react-addons-shallow-compare, for independent usage
use-memo-one 1.1.0 - 1.1.1Outdated
useMemo and useCallback but with a stable cache
clipboard 2.0.8Outdated
Modern copy to clipboard. No Flash. Just 2kb
airbnb-prop-types 2.16.0
Custom React PropType validators that we use at Airbnb.
downshift 6.1.0Outdated
🏎 A set of primitives to build simple, flexible, WAI-ARIA compliant React autocomplete, combobox or select dropdown components.
react-intl 3.0.0 - 4.5.0Outdated
Internationalize React apps. This library provides React components and an API to format dates, numbers, and strings, including pluralization and handling translations.
prop-types-exact 1.0.0 - 1.2.0
For use with React PropTypes. Will error on any prop not explicitly specified.
popmotion 11.0.3Outdated
The animator's toolbox
style-value-types 5.0.0 - 5.1.0Outdated
Parsers, transformers and tests for special value types, eg: %, hex codes etc.
antd 4.3.0 - 5.1.0Outdated
An enterprise-class UI design language and React components implementation
fast-memoize 2.3.0 - 2.5.2
Fastest memoization lib that supports N arguments
caiogondim
caiogondim
rc-picker 2.3.2 - 3.1.4Outdated
React date & time picker
redux-saga 0.6.0 - 0.10.2Outdated
Saga middleware for Redux to handle Side Effects
svelte 3.40.0 - 3.55.1Outdated
Cybernetically enhanced web apps
consolidated-events 2.0.2
Manage multiple event handlers using few event listeners
@reach/utils 0.18.0
Internal, shared utilities for Reach UI.
+1
ryanflorence
mjackson
chancestrickland
@chakra-ui/utils 1.0.0 - 2.0.15
Common utilities and types for Chakra UI
segunadebayo
_codebender828
@chakra-ui/styled-system 1.2.0 - 1.3.1Outdated
Style function for css-in-js building component libraries
murmurhash 0.0.1 - 0.0.2Outdated
A Node.js module for the optimized JavaScript implementation of the MurmurHash algorithms.
perezd
perezd
@chakra-ui/media-query 1.0.0 - 3.2.11Outdated
A React hook for changing properties or visibility of a component based on css media query
mousetrap 1.6.5
Simple library for handling keyboard shortcuts
document.contains 1.0.2
Polyfill/shim for `document.contains`
react-outside-click-handler 1.3.0
A React component for dealing with clicks outside its subtree
+2
brieb
airbnbeng
lencioni
react-with-direction 1.3.1 - 1.4.0
Components to provide and consume RTL or LTR direction in React
+4
brieb
airbnbeng
lencioni
react-moment-proptypes 1.6.0 - 1.8.1
React proptype for moment module
react-with-styles 4.2.0Outdated
[![Build Status][travis-svg]][travis-url] [![dependency status][deps-svg]][deps-url] [![dev dependency status][dev-deps-svg]][dev-deps-url] [![License][license-image]][license-url] [![Downloads][downloads-image]][downloads-url]
react-dates 21.8.0
A responsive and accessible date range picker component built with React
+4
lencioni
ljharb
ahuth
react-native-web 0.0.78 - 0.18.10Outdated
React Native for Web
global-cache 1.2.1
Sometimes you have to do horrible things, like use the global object to share a singleton. Abstract that away, with this!
react-with-styles-interface-css 6.0.0
Interface for react-with-styles outputting CSS
is-touch-device 1.0.0 - 1.0.1
Is the current JS environment a touch device?
dom-scroll-into-view 1.1.0 - 1.2.1Outdated
scroll dom node into view automatically
keymirror 0.1.0 - 0.1.1
A simple utility for creating an object with values equal to its keys. Identical to react/lib/keyMirror
strml
strml
react-range 1.4.7 - 1.8.14
Range input. Slides in all directions.
@wordpress/i18n 4.4.0 - 4.19.0Outdated
WordPress internationalization (i18n) library.
reakit-utils 0.15.1Outdated
Reakit utils
reakit-system 0.15.1 - 0.15.2
Reakit System utils
reakit 1.0.0 - 1.3.11
Toolkit for building accessible rich web apps with React
@wordpress/url 3.12.0 - 3.20.0Outdated
WordPress URL utilities.
memize 1.1.0Outdated
Unabashedly-barebones memoization library with an aim toward speed
@atlaskit/spinner 12.0.0 - 12.1.7Outdated
A spinner is an animated spinning icon that lets users know content is being loaded.
atlaskit
atlaskit
tannin 1.2.0
gettext localization library compatible with Jed-formatted locale data
@tannin/plural-forms 1.0.0 - 1.1.0
Compiles a function to compute the plural forms index for a given value
aduth
aduth
@tannin/compile 1.1.0
Compiles an evaluating function for a C expression
aduth
aduth
@tannin/evaluate 1.1.0 - 1.2.0
Evaluates the result of an expression given as postfix terms
aduth
aduth
@tannin/postfix 1.0.0 - 1.1.0
Convert a C expression to an array of postfix terms
aduth
aduth
most 0.7.0 - 0.9.1Outdated
Monadic streams
react-dfp 0.3.0 - 0.3.3Outdated
A React implementation of the google [DFP](https://developers.google.com/doubleclick-gpt/reference "GPT Reference") API. This package is inspired in the awesome library [jquery.dfp](https://github.com/coop182/jquery.dfp.js), and aims to provide its same e
prebid.js 1.38.0 - 7.32.0Outdated
Header Bidding Management Library
remove-accents x.x.x
rungen x.x.x
equivalent-key-map x.x.x
turbo-combine-reducers x.x.x
rememo x.x.x
gradient-parser x.x.x
@floating-ui/react-dom x.x.x
@use-gesture/core x.x.x
@use-gesture/react x.x.x
react-colorful x.x.x
re-resizable x.x.x