pubpub.org 240 packages

Last scanned on Jan 19 at 08:02 AM
crypto-js 3.1.8 - 3.3.0VulnerableOutdated
JavaScript library of crypto standards.
License
MIT
Footprint
6 KB
Vulnerabilities
crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard
Affected versions >=0 <4.2.0
Matched Modules
Version distribution in production
457
4.1.0
457
4.1.1
185
3.3.0
162
3.1.8
143
3.2.1
143
4.0.0
decode-uri-component 0.2.0VulnerableOutdated
A better decodeURIComponent
lodash.pick 4.4.0Vulnerable
The lodash method `_.pick` exported as a module.
color-string 1.5.3VulnerableOutdated
Parser and generator for CSS color strings
@firebase/util 0.2.38 - 0.2.46VulnerableOutdated
_NOTE: This is specifically tailored for Firebase JS SDK usage, if you are not a member of the Firebase team, please avoid using this package_
+1
chholland
firebase-ops
feiyang.chen
es5-ext 0.10.24 - 0.10.49VulnerableOutdated
ECMAScript extensions and shims
next 9.5.5 - 13.1.2VulnerableOutdated
The React Framework
rauchg
timneutkens
vercel-release-bot
tslib 1.11.0 - 1.11.1Outdated
Runtime library for TypeScript helper functions
color-convert 1.9.2 - 1.9.3Outdated
Plain color conversion functions
color-name 1.1.3 - 1.1.4Outdated
A list of color names and its values
source-map 0.6.1Outdated
Generates and consumes source maps
+16
tigleym
nbaumgardner
eemeli
escape-string-regexp 2.0.0Outdated
Escape RegExp special characters
uuid 3.4.0Outdated
RFC4122 (v1, v4, and v5) UUIDs
isarray 1.0.0 - 2.0.5
Array#isArray for older browsers
react-is 16.13.1Outdated
Brand checking of React Elements.
inherits 1.0.1 - 2.0.3Outdated
Browser-friendly inheritance fully compatible with standard node.js inherits()
buffer 4.9.2Outdated
Node.js Buffer API, for the browser
@babel/runtime 7.18.2 - 7.18.3Outdated
babel's modular runtime helpers
+1
hzoo
existentialism
nicolo-ribaudo
is-extendable 1.0.0 - 1.0.1
Returns true if a value is a plain object, array or function.
get-intrinsic 1.1.2Outdated
Get and robustly cache all JS language-level intrinsics at first require time
function-bind 1.1.1Outdated
Implementation of Function.prototype.bind
lodash 4.17.21
Lodash modular utilities.
is-arrayish 0.3.2
Determines if an object can be used as an array
call-bind 1.0.2Outdated
Robustly `.call.bind()` a function
fast-deep-equal 2.0.1Outdated
Fast deep equal
has-symbols 1.0.2 - 1.0.3
Determine if the JS environment has Symbol support. Supports spec, or shams.
isobject 3.0.1Outdated
Returns true if the value is an object and not an array or null.
ieee754 1.1.9 - 1.1.13Outdated
Read/write IEEE754 floating point numbers from/to a Buffer or array-like object
is-plain-object 2.0.2 - 2.0.4Outdated
Returns true if an object was created by the `Object` constructor, or Object.create(null).
has-property-descriptors 1.0.0Outdated
Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD.
object-assign 4.1.1
ES2015 `Object.assign()` ponyfill
parse5 0.5.0 - 1.0.1Outdated
HTML parser and serializer.
es-abstract 1.18.0 - 1.20.1Outdated
ECMAScript spec abstract operations.
base64-js 1.3.1Outdated
Base64 encoding/decoding in pure JS
define-properties 1.1.4Outdated
Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.
nanoid 2.1.11Outdated
A tiny (116 bytes), secure URL-friendly unique string ID generator
has-tostringtag 1.0.0Outdated
Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.
deepmerge 4.2.2Outdated
A library for deep (recursive) merging of Javascript objects
object-keys 1.1.1
An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim
regexp.prototype.flags 1.4.3Outdated
ES6 spec-compliant RegExp.prototype.flags shim.
core-js 2.6.11Outdated
Standard library
is-regex 1.1.4
Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag
is-date-object 1.0.2 - 1.0.3Outdated
Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
util 0.11.1Outdated
Node.js's util module for all engines
functions-have-names 1.2.3
Does this JS environment support the `name` property on functions?
has 1.0.2 - 1.0.3Outdated
Object.prototype.hasOwnProperty.call shortcut
tarruda
tarruda
strip-indent 3.0.0Outdated
Strip leading whitespace from each line in a string
scheduler 0.19.1Outdated
Cooperative scheduler for the browser environment.
prop-types 15.7.0 - 15.7.2Outdated
Runtime type checking for React props and similar objects.
is-arguments 1.1.1
Is this an arguments object? It's a harder question than you think.
react 16.13.1Outdated
React is a JavaScript library for building user interfaces.
process 0.11.10
process information for node.js and browsers
react-dom 16.13.1Outdated
React package for working with the DOM.
deep-equal 1.1.0 - 1.1.1Outdated
node's assert.deepEqual algorithm
color 3.1.2 - 3.2.1Outdated
Color conversion and manipulation with CSS string support
object-is 1.1.2 - 1.1.3Outdated
ES2015-compliant shim for Object.is - differentiates between -0 and +0
min-indent 1.0.0Outdated
Get the shortest leading whitespace from lines in a string
setimmediate 1.0.5
A shim for the setImmediate efficient script yielding API
domenic
domenic
hoist-non-react-statics 3.3.2
Copies non-react specific statics from a child component to a parent component
mridgway
mridgway
simple-swizzle 0.2.1 - 0.2.2
Simply swizzle your arguments
path-browserify 0.0.1Outdated
the path module from node core for browsers
classnames 2.2.6Outdated
A simple utility for conditionally joining classNames together
source-map-url 0.4.0 - 0.4.1
Tools for working with sourceMappingURL comments.
object.pick 1.1.2 - 1.3.0
Returns a filtered copy of an object with only the specified keys, similar to `_.pick` from lodash / underscore.
symbol-observable 1.1.0 - 1.2.0Outdated
Symbol.observable ponyfill
query-string 6.12.1Outdated
Parse and stringify URL query strings
resolve-url 0.2.1
Like Node.js’ `path.resolve`/`url.resolve` for the browser.
react-transition-group 2.9.0Outdated
A react component toolset for managing animations
dom-helpers 3.4.0Outdated
tiny modular DOM lib for ie9+
@popperjs/core 2.11.3 - 2.11.5Outdated
Tooltip and Popover Positioning Engine
tiny-invariant 1.1.0Outdated
A tiny invariant function
@sentry/types 5.0.0 - 5.20.1Outdated
Types for all Sentry JavaScript SDKs
+8
benvinegar
billyvg
mitsuhiko
strict-uri-encode 2.0.0
A stricter URI encode adhering to RFC 3986
memoize-one 5.1.0 - 5.1.1Outdated
A memoization library which only remembers the latest invocation
@sentry/utils 5.15.5 - 5.16.1Outdated
Utilities for all Sentry JavaScript SDKs
+8
benvinegar
billyvg
mitsuhiko
dateformat 3.0.3Outdated
A node.js package for Steven Levithan's excellent dateFormat() function.
+3
felixge
ctavan
jonschlinkert
@sentry/core 5.15.0 - 5.15.5Outdated
Base implementation for all Sentry JavaScript SDKs
+8
benvinegar
billyvg
mitsuhiko
lodash-es 4.17.21
Lodash exported as ES modules.
redux 4.0.5Outdated
Predictable state container for JavaScript apps
filesize 4.2.1Outdated
JavaScript library to generate a human readable String describing the file size
camelcase-css 2.0.1
Convert a kebab-cased CSS property into a camelCased DOM property.
warning 4.0.3
A mirror of Facebook's Warning
timers-browserify 2.0.10 - 2.0.12
timers module for browserify
crypto-browserify 1.0.9 - 2.0.0Outdated
implementation of crypto for the browser
+2
dcousens
ljharb
cwmma
js-cookie 2.2.1Outdated
A simple, lightweight JavaScript API for handling cookies
use-sync-external-store 1.0.0 - 1.2.0
Backwards compatible shim for React's useSyncExternalStore. Works with any React that supports hooks.
acdlite
gnoff
react-bot
react-redux 7.2.0Outdated
Official React bindings for Redux
react-lifecycles-compat 3.0.4
Backwards compatibility polyfill for React class components
fb
sophiebits
split-on-first 1.0.0 - 1.1.0Outdated
Split a string on the first occurance of a given separator
resize-observer-polyfill 1.5.1
A polyfill for the Resize Observer API
@vue/shared 3.0.0 - 3.2.45Outdated
internal utils shared across @vue packages
p-is-promise 3.0.0 - 4.0.0
Check if something is a promise
@sentry/browser 5.15.5Outdated
Official Sentry SDK for browsers
+8
benvinegar
billyvg
mitsuhiko
css 2.2.2 - 2.2.4Outdated
CSS parser / stringifier
copy-to-clipboard 3.3.0 - 3.3.1Outdated
Copy stuff into clipboard using JS with fallbacks
react-popper 1.3.7Outdated
Official library to use Popper on React projects
toggle-selection 1.0.5 - 1.0.6
Toggle current selected content in browser
lodash.throttle 4.1.1
The lodash method `_.throttle` exported as a module.
throttle-debounce 2.1.0Outdated
Throttle and debounce functions.
popper.js 1.16.1
A kickass library to manage your poppers
tinycolor2 1.4.1Outdated
Fast Color Parsing and Manipulation
@sentry/hub 5.15.4 - 5.15.5Outdated
Sentry hub which handles global state managment.
+8
benvinegar
billyvg
mitsuhiko
@firebase/component 0.1.4 - 0.1.11Outdated
Firebase Component Platform
+1
chholland
firebase-ops
feiyang.chen
is-url 1.2.4
Check whether a string is a URL.
segmentio
zeke
zustand 4.1.0 - 4.1.1Outdated
🐻 Bear necessities for state management in React
react-dropzone 10.2.2Outdated
Simple HTML5 drag-drop zone with React.js
@firebase/logger 0.2.0 - 0.2.3Outdated
A logger package for use in the Firebase JS SDK
+1
chholland
firebase-ops
feiyang.chen
attr-accept 2.0.0 - 2.2.0Outdated
JavaScript implementation of the "accept" attribute for HTML5 <input type="file">
file-saver 2.0.2Outdated
An HTML5 saveAs() FileSaver implementation
file-selector 0.1.12Outdated
Convert DataTransfer object to a list of File objects
object.omit 3.0.0
Return a copy of an object excluding the given key, or array of keys. Also accepts an optional filter function as the last argument.
@sentry/minimal 5.10.0 - 5.15.5Outdated
Sentry minimal library that can be used in other packages
+8
benvinegar
billyvg
mitsuhiko
@hookform/resolvers 1.0.0Outdated
React Hook Form validation resolvers: Yup, Joi, Superstruct, Zod, Vest, Class Validator, io-ts, Nope, computed-types, TypeBox, arktype and Typanion
focus-lock 0.4.0 - 0.11.4Outdated
DOM trap for a focus
css-box-model 1.1.2 - 1.2.1
Get accurate and well named css box model information about an Element 📦
gud 1.0.0
Create a 'gud nuff' (not cryptographically secure) globally unique id
lodash.omit 4.5.0
The lodash method `_.omit` exported as a module.
raf-schd 4.0.1 - 4.0.3
A scheduler based on requestAnimationFrame
use-memo-one 1.1.0 - 1.1.1Outdated
useMemo and useCallback but with a stable cache
screenfull 5.0.2Outdated
Simple wrapper for cross-browser usage of the JavaScript Fullscreen API, which lets you bring the page or any element into fullscreen.
sindresorhus
sindresorhus
react-dnd 0.1.2 - 0.9.8Outdated
Drag and Drop for React
+2
jordangens
gaearon
darthtrevino
@firebase/app 0.6.2Outdated
The primary entrypoint to the Firebase JS SDK
+1
chholland
firebase-ops
feiyang.chen
firebase 7.14.1Outdated
Firebase JavaScript library for web and Node.js
@firebase/auth 0.14.3Outdated
The Firebase Authenticaton component of the Firebase JS SDK.
+1
chholland
firebase-ops
feiyang.chen
lit-element 3.0.1 - 3.2.2Outdated
A simple base class for creating fast, lightweight web components
+11
aomarks
emarquez
sorvell
@firebase/firestore 0.3.5 - 0.3.7Outdated
The Cloud Firestore component of the Firebase JS SDK.
+1
chholland
firebase-ops
feiyang.chen
react-use 14.1.1Outdated
Collection of React Hooks
streamich
streamich
react-beautiful-dnd 12.2.0Outdated
Beautiful and accessible drag and drop for lists with React
rc-motion 2.2.0 - 2.4.5Outdated
React lifecycle controlled motion library
algoliasearch 4.2.0Outdated
A fully-featured and blazing-fast JavaScript API client to interact with Algolia API.
+7
millotp
shortcuts
haroenv
@xobotyi/scrollbar-width 1.9.1 - 1.9.5
A tool to get browser's scrollbars width.
fast-memoize 2.3.0 - 2.5.2
Fastest memoization lib that supports N arguments
caiogondim
caiogondim
material-colors 1.2.5 - 1.2.6
Colors of Google's Material Design made available to coders
use-debounce 3.4.0 - 3.4.2Outdated
Debounce hook for react
create-react-context 0.3.0
Polyfill for the proposed React context API
react-color 2.18.0Outdated
A Collection of Color Pickers from Sketch, Photoshop, Chrome & more
reactcss 1.2.2 - 1.2.3
Bringing Classes to Inline Styles
linkifyjs 2.0.0 - 3.0.5Outdated
Find URLs, email addresses, #hashtags and @mentions in plain-text strings, then convert them into HTML <a> links.
@icons/material 0.2.0 - 0.4.1
> materialdesignicons.com
icons-admin
case
redux-persist 4.4.0 - 4.5.0Outdated
persist and rehydrate redux stores
andarist
rt2zz
@babel/runtime-corejs2 7.0.0 - 7.11.2Outdated
babel's modular runtime helpers with core-js@2 polyfilling
+1
hzoo
existentialism
nicolo-ribaudo
body-scroll-lock 2.7.0 - 3.0.3Outdated
Enables body scroll locking (for iOS Mobile and Tablet, Android, desktop Safari/Chrome/Firefox) without breaking scrolling of a target element (eg. modal/lightbox/flyouts/nav-menus)
diacritics 1.3.0
remove diacritics from strings
striptags 3.2.0
PHP strip_tags in Node.js
react-input-mask 1.2.0 - 1.2.2Outdated
Masked input component for React
sweetalert2 8.0.0 - 9.3.14Outdated
A beautiful, responsive, customizable and accessible (WAI-ARIA) replacement for JavaScript's popup boxes, supported fork of sweetalert
@chakra-ui/hooks 2.0.0 - 2.1.5Outdated
React hooks for Chakra components
@amplitude/utils 1.0.4 - 1.10.2
Utility functions for the Amplitude JavaScript SDK
+18
kwallachamp
alec.amplitude
amplicynthia
semantic-ui-react 0.83.0 - 2.1.4Outdated
The official Semantic-UI-React integration.
layershifter
levithomason
react-avatar-editor 11.0.7Outdated
Avatar / profile picture component. Resize and crop your uploaded image using a intuitive user interface.
iframe-resizer-react 1.0.3 - 1.0.5Outdated
React interface for iframe-resizer
davidjbradshaw
davidjbradshaw
deepcopy 2.0.0 - 2.1.0
deep copy data
sasaplus1
sasaplus1
@wordpress/hooks 1.0.0 - 2.12.3Outdated
WordPress hooks library.
react-timeago 4.4.0Outdated
A simple Time-Ago component for ReactJs
reakit-utils 0.7.3Outdated
Reakit utils
reakit-system 0.7.2Outdated
Reakit System utils
reakit 1.0.0 - 1.0.2Outdated
Toolkit for building accessible rich web apps with React
stickybits 3.7.6Outdated
Stickybits is a lightweight alternative to `position: sticky` polyfills
@sitecore-jss/sitecore-jss-react 9.0.1 - 18.0.2Outdated
This module is provided as a part of Sitecore JavaScript Rendering SDK (JSS). It contains React components and integration for JSS.
+7
sc-yavorkrastev
sitecorecorporation
sc-maximnakhod
botframework-webchat 4.15.3 - 4.15.6Outdated
A highly-customizable web-based chat client for Azure Bot Services.
+5
botframework
sgellock
cwhitten
@dhmk/utils 2.0.0 - 4.2.2Outdated
A collection of frequently used functions and primitives
tg-core-components 0.0.2 - 6.3.0Outdated
tg-core-components
+4
albinadolfsson
codebetniklas
sebost
@lezer/highlight x.x.x
@blueprintjs/core x.x.x
@codemirror/state x.x.x
orderedmap x.x.x
prosemirror-model x.x.x
prosemirror-state x.x.x
@lezer/common x.x.x
@codemirror/language x.x.x
@codemirror/view x.x.x
@remirror/core-helpers x.x.x
prosemirror-transform x.x.x
@lezer/lr x.x.x
prosemirror-view x.x.x
set-harmonic-interval x.x.x
prosemirror-commands x.x.x
zod-to-json-schema x.x.x
@codemirror/autocomplete x.x.x
prosemirror-keymap x.x.x
style-mod x.x.x
@pubpub/prosemirror-reactive x.x.x
prosemirror-inputrules x.x.x
@blueprintjs/select x.x.x
valid-url x.x.x
prosemirror-compress-pubpub x.x.x
zod x.x.x
rope-sequence x.x.x
prosemirror-history x.x.x
w3c-keyname x.x.x
fuzzysearch x.x.x
prosemirror-schema-list x.x.x
@remirror/core-constants x.x.x
@remirror/core-utils x.x.x
prosemirror-tables x.x.x
@lezer/css x.x.x
@codemirror/lang-css x.x.x
@lezer/javascript x.x.x
@codemirror/lang-javascript x.x.x
@benrbray/prosemirror-math x.x.x
katex x.x.x
@lezer/html x.x.x
@codemirror/lang-html x.x.x
dom-walk x.x.x
min-document x.x.x
prosemirror-collab x.x.x
react-usestateref x.x.x
@blueprintjs/icons x.x.x
@codemirror/lang-sql x.x.x
nano-css x.x.x
fast-shallow-equal x.x.x
ts-easing x.x.x
dom4 x.x.x
lodash.pickby x.x.x
@lezer/cpp x.x.x
@lezer/xml x.x.x
@lezer/java x.x.x
@lezer/json x.x.x
@lezer/markdown x.x.x
@lezer/python x.x.x
@lezer/rust x.x.x
prosemirror-suggest x.x.x
source-map-resolve x.x.x
urix x.x.x
prosemirror-gapcursor x.x.x
mudder x.x.x
@firebase/database x.x.x
@monaco-editor/loader x.x.x
state-local x.x.x
@monaco-editor/react x.x.x
@codemirror/lang-markdown x.x.x
@codemirror/lang-cpp x.x.x
@codemirror/lang-xml x.x.x
@codemirror/lang-java x.x.x
@codemirror/lang-json x.x.x
@codemirror/lang-python x.x.x
@codemirror/lang-rust x.x.x
crelt x.x.x
@codemirror/search x.x.x
@codemirror/commands x.x.x