About
Community
obsidian-ui.com
65 packages
Last scanned on Oct 29 at 04:01 PM
Update
Name
Size
Popularity
Severity
lodash
4.17.16
Vulnerable
Outdated
Lodash modular utilities.
Script
https://obsidian-ui.com/vendors~main.dd39a3fbb2609b6f5755.manager.bundle.js
License
MIT
Footprint
11 KB
Vulnerabilities
High
GHSA-35jh-r3h4-6jhm
Command Injection in lodash
Affected versions >=0 <4.17.21
Moderate
GHSA-29mw-wpgm-hmr9
Regular Expression Denial of Service (ReDoS) in lodash
Affected versions >=0 <4.17.21
High
GHSA-p6mc-m468-83gw
Prototype Pollution in lodash
Affected versions >=3.7.0 <4.17.19
Matched Modules
Version distribution in production
3 846
4.17.16
946
4.17.21
337
4.17.20
322
4.17.15
302
4.17.19
301
4.17.13
Also used on 4830 websites
skype.com
20 packages
sentry.io
157 packages
pinterest.com
56 packages
pinimg.com
52 packages
Repository
Homepage
More
modules
stdlib
util
semver
7.3.0 - 7.3.6
Outdated
The semantic version parser used by npm.
+2
uuid
7.0.0 - 8.0.0
Outdated
RFC4122 (v1, v4, and v5) UUIDs
uuid
guid
rfc4122
isarray
1.0.0 - 2.0.5
Array#isArray for older browsers
browser
isarray
array
juliangruber
qs
6.11.0
Outdated
A querystring parser that supports nesting and arrays, with a depth limit
querystring
qs
query
url
parse
+1
@babel/runtime
7.0.0 - 7.12.18
Outdated
babel's modular runtime helpers
+1
get-intrinsic
1.1.3
Outdated
Get and robustly cache all JS language-level intrinsics at first require time
javascript
ecmascript
es
js
intrinsic
+2
ljharb
function-bind
1.1.0 - 1.1.1
Outdated
Implementation of Function.prototype.bind
function
bind
shim
es5
call-bind
1.0.2
Outdated
Robustly `.call.bind()` a function
javascript
ecmascript
es
js
callbind
+8
ljharb
object-inspect
1.12.2
Outdated
string representations of objects in node and the browser
inspect
util.inspect
object
stringify
pretty
fast-deep-equal
3.0.0 - 3.1.3
Fast deep equal
fast
equal
deep-equal
esp
has-symbols
1.0.2 - 1.0.3
Determine if the JS environment has Symbol support. Supports spec, or shams.
Symbol
symbols
typeof
sham
polyfill
+3
ljharb
isobject
3.0.0 - 4.0.0
Returns true if the value is an object and not an array or null.
check
is
is-object
isobject
kind
+7
side-channel
1.0.4
Outdated
Store information about any JS value in a side channel. Uses WeakMap if available.
weakmap
map
side
channel
metadata
ljharb
has-property-descriptors
1.0.0
Outdated
Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD.
property
descriptors
has
environment
env
+2
ljharb
es-abstract
1.20.4
Outdated
ECMAScript spec abstract operations.
ECMAScript
ES
abstract
operation
abstract operation
+4
ljharb
define-properties
1.1.4
Outdated
Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.
Object.defineProperty
Object.defineProperties
object
property descriptor
descriptor
+2
ljharb
is-callable
1.2.7
Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.
Function
function
callable
generator
generator function
+5
ljharb
has-tostringtag
1.0.0
Outdated
Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.
javascript
ecmascript
symbol
symbols
tostringtag
+1
ljharb
object-keys
1.1.0 - 1.1.1
An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim
Object.keys
keys
ES5
shim
ljharb
regexp.prototype.flags
1.4.2 - 1.4.3
Outdated
ES6 spec-compliant RegExp.prototype.flags shim.
RegExp.prototype.flags
regex
regular expression
ES6
shim
+6
ljharb
core-js
3.25.0 - 3.26.0
Outdated
Standard library
ES3
ES5
ES6
ES7
ES2015
+39
zloirock
is-regex
1.1.4
Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag
regex
regexp
is
regular expression
regular
+1
ljharb
internal-slot
1.0.1 - 1.0.3
Outdated
ES spec-like internal slots
internal
slot
internal slot
ecmascript
es
+5
ljharb
is-date-object
1.0.5
Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
Date
ES6
toStringTag
@@toStringTag
Date object
ljharb
is-string
1.0.7
Is this value a JS String object or primitive? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
String
string
ES6
toStringTag
@@toStringTag
+1
ljharb
es-to-primitive
1.2.0 - 1.2.1
ECMAScript “ToPrimitive” algorithm. Provides ES5 and ES2015 versions.
primitive
abstract
ecmascript
es5
es6
+11
ljharb
function.prototype.name
1.1.2 - 1.1.5
Outdated
An ES2015 spec-compliant `Function.prototype.name` shim
Function.prototype.name
function
name
ES6
ES2015
+3
ljharb
functions-have-names
1.1.1 - 1.2.3
Does this JS environment support the `name` property on functions?
function
name
es5
names
functions
+1
ljharb
object.values
1.1.5
Outdated
ES2017 spec-compliant Object.values shim.
Object.values
Object.keys
Object.entries
values
ES7
+8
ljharb
array-includes
3.1.5
Outdated
An ES7/ES2016 spec-compliant `Array.prototype.includes` shim/polyfill/replacement that works as far down as ES3.
Array.prototype.includes
includes
array
ES7
shim
+4
ljharb
has
1.0.1 - 1.0.3
Outdated
Object.prototype.hasOwnProperty.call shortcut
tarruda
scheduler
0.15.0 - 0.23.0
Cooperative scheduler for the browser environment.
react
+1
globalthis
1.0.3
ECMAScript spec-compliant polyfill/shim for `globalThis`
window
self
global
globalThis
System.global
+6
ljharb
array.prototype.flat
1.3.0
Outdated
An ES2019 spec-compliant `Array.prototype.flat` shim/polyfill/replacement that works as far down as ES3.
Array.prototype.flatten
Array.prototype.flat
flatten
flat
array
+6
ljharb
prop-types
15.8.0 - 15.8.1
Runtime type checking for React props and similar objects.
react
is-arguments
1.1.1
Is this an arguments object? It's a harder question than you think.
arguments
js
javascript
is-arguments
is
+1
ljharb
react
16.13.0 - 17.0.2
Outdated
React is a JavaScript library for building user interfaces.
react
+1
object.fromentries
2.0.3 - 2.0.5
Outdated
ES proposal-spec-compliant Object.fromEntries shim.
Object.fromEntries
Object.entries
Object.values
Object.keys
entries
+9
ljharb
object.entries
1.1.5
Outdated
ES2017 spec-compliant Object.entries shim.
Object.entries
Object.values
Object.keys
entries
values
+8
ljharb
string.prototype.matchall
4.0.7
Outdated
Spec-compliant polyfill for String.prototype.matchAll
ES2020
ES
String.prototype.matchAll
matchAll
match
+5
ljharb
is-set
2.0.1 - 2.0.2
Outdated
Is this value a JS Set? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
map
set
collection
is
robust
ljharb
is-map
2.0.1 - 2.0.2
Outdated
Is this value a JS Map? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
map
set
collection
is
robust
ljharb
@storybook/core-events
5.0.0 - 6.5.13
Outdated
Event names used in storybook core
storybook
+6
es-get-iterator
1.1.2
Outdated
Get an iterator for any JS language value. Works robustly across all environments, all versions.
iterator
Symbol.iterator
iterable
collection
next
+1
ljharb
postcss-merge-longhand
5.0.6 - 5.1.6
Outdated
Merge longhand properties into shorthand with PostCSS.
css
minify
optimise
postcss
postcss-plugin
+4
object.getownpropertydescriptors
2.1.4
Outdated
ES2017 spec-compliant shim for `Object.getOwnPropertyDescriptors` that works in ES5.
Object.getOwnPropertyDescriptors
descriptor
property descriptor
ES8
ES2017
+4
ljharb
es-array-method-boxes-properly
1.0.0
Utility package to determine if an `Array.prototype` method properly boxes the callback's receiver and third argument.
ljharb
es5-ext
0.3.0 - 0.6.3
Outdated
ECMAScript extensions and shims
ecmascript
ecmascript5
ecmascript6
es5
es6
+11
medikoo
lodash-es
4.17.20 - 4.17.21
Lodash exported as ES modules.
es6
modules
stdlib
util
@storybook/router
5.0.1 - 5.2.8
Outdated
Core Storybook Router
storybook
+6
timers-browserify
2.0.9
Outdated
timers module for browserify
timers
browserify
browser
+36
shallowequal
1.0.1 - 1.1.0
Like lodash isEqualWith but for shallow equal.
shallowequal
shallow
equal
isequal
compare
+1
dashed
ts-dedent
2.2.0
TypeScript package which smartly trims and strips indentation from multi-line strings
dedent
deindent
indentation
multi-line string
multiline strings
+6
tamino-martinius
throttle-debounce
2.2.0 - 3.0.1
Outdated
Throttle and debounce functions.
debounce
throttle
niksy
string.prototype.padend
3.1.0 - 3.1.3
Outdated
ES2017 spec-compliant String.prototype.padEnd shim.
String.prototype.padRight
String.prototype.padEnd
string
ES2017
ES8
+8
ljharb
is-function
1.0.2
is that thing a function? Use this module to find out
polyfill
is-function
ie6
grncdr
array.prototype.map
1.0.1 - 1.0.4
Outdated
An ES5 spec-compliant `Array.prototype.map` shim/polyfill/replacement that works as far down as ES3.
Array.prototype.map
map
array
ES5
shim
+2
ljharb
iterate-iterator
1.0.0 - 1.0.2
Iterate any JS iterator. Works robustly in all environments, all versions.
iterate
iterator
iterable
es2015
es6
+3
ljharb
promise.allsettled
1.0.4 - 1.0.5
Outdated
ES Proposal spec-compliant shim for Promise.allSettled
Promise
promises
allsettled
settled
fulfilled
+7
ljharb
promise.prototype.finally
3.1.1 - 3.1.3
Outdated
ES Proposal spec-compliant shim for Promise.prototype.finally
Promise
promises
finally
promise.prototype.finally
ES7
+5
string.prototype.padstart
3.1.0 - 3.1.3
Outdated
ES2017 spec-compliant String.prototype.padStart shim.
String.prototype.padLeft
String.prototype.padStart
string
ES8
ES2017
+8
ljharb
element-resize-detector
1.2.4
Resize event emitter for elements.
wnr
batch-processor
1.0.0
Batch processing in JS
wnr
react-sizeme
3.0.0 - 3.0.2
Make your React Components aware of their width and/or height!
library
ctrlplusb
Popular search queries
webpack.js.org
url
react-scripts
react
lottie-api
react-helmet-async
+7 packages
github.com
color-convert
@headlessui/react
hoist-non-react-statics
reactstrap
lit-html
+60 packages
pinterest.com
lodash
relay-runtime
react-relay
react-use
lodash-es
+51 packages
Popular packages
react
React is a JavaScript library for building user interfaces.
+6 634 websites
core-js
Standard library
+10 238 websites
es5-ext
ECMAScript extensions and shims
+10 229 websites
@babel/runtime
babel's modular runtime helpers
+8 352 websites
lodash
Lodash modular utilities.
+4 826 websites
axios
Promise based HTTP client for the browser and node.js
+4 742 websites