184 packages

Last scanned on Oct 27 at 07:39 PM
moment 2.29.1VulnerableOutdated
Parse, validate, manipulate, and display dates
3 KB
Moment.js vulnerable to Inefficient Regular Expression Complexity
Affected versions >=2.18.0 <2.29.4
Path Traversal: 'dir/../../filename' in moment.locale
Affected versions >=0 <2.29.2
Matched Modules
Version distribution in production
decode-uri-component 0.2.0VulnerableOutdated
A better decodeURIComponent
ua-parser-js 0.7.23VulnerableOutdated
Detect Browser, Engine, OS, CPU, and Device type/model from User-Agent data. Supports browser & node.js environment
axios 0.26.0VulnerableOutdated
Promise based HTTP client for the browser and node.js
validator 11.1.0VulnerableOutdated
String validation and sanitization
moment-timezone 0.5.33VulnerableOutdated
Parse and display moments in any timezone.
tslib 1.13.0 - 1.14.1Outdated
Runtime library for TypeScript helper functions
readable-stream 2.3.7Outdated
Node.js Streams, a user-land copy of the stream library from Node.js
safe-buffer 5.1.1 - 5.1.2Outdated
Safer Node.js Buffer API
uuid 3.4.0Outdated
RFC4122 (v1, v4, and v5) UUIDs
string_decoder 1.1.0 - 1.3.0
The string_decoder module from Node core
isarray 0.0.0 - 0.0.1Outdated
Array#isArray for older browsers
react-is 16.13.1Outdated
Brand checking of React Elements.
inherits 2.0.4
Browser-friendly inheritance fully compatible with standard node.js inherits()
buffer 4.9.2Outdated
Node.js Buffer API, for the browser
regenerator-runtime 0.13.7Outdated
Runtime for Regenerator-compiled generator and async functions.
@babel/runtime 7.16.7 - 7.17.9Outdated
babel's modular runtime helpers
cookie 0.3.1Outdated
HTTP server cookie parsing and serialization
lodash 4.17.21
Lodash modular utilities.
path-to-regexp 1.8.0Outdated
Express style path to RegExp utility
function-bind 1.1.1Outdated
Implementation of Function.prototype.bind
entities 1.1.2Outdated
Encode & decode XML and HTML entities with ease & speed
get-intrinsic 1.1.1Outdated
Get and robustly cache all JS language-level intrinsics at first require time
core-util-is 1.0.2Outdated
The `*` functions introduced in Node v0.12.
object-inspect 1.12.2Outdated
string representations of objects in node and the browser
has-symbols 1.0.2 - 1.0.3
Determine if the JS environment has Symbol support. Supports spec, or shams.
call-bind 1.0.2Outdated
Robustly `.call.bind()` a function
util-deprecate 1.0.2
The Node.js `util.deprecate()` function with browser support
ieee754 1.2.0 - 1.2.1
Read/write IEEE754 floating point numbers from/to a Buffer or array-like object
object-assign 4.0.1Outdated
ES2015 `Object.assign()` ponyfill
define-properties 1.1.4Outdated
Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.
base64-js 1.5.1
Base64 encoding/decoding in pure JS
domutils 1.7.0Outdated
Utilities for working with htmlparser2's dom
dom-serializer 0.2.2Outdated
render domhandler DOM nodes to a string
es-abstract 1.20.1Outdated
ECMAScript spec abstract operations.
is-callable 1.2.4Outdated
Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.
has-property-descriptors 1.0.0Outdated
Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD.
process-nextick-args 2.0.1
process.nextTick but always with args
domhandler 2.4.2Outdated
Handler for htmlparser2 that turns pages into a dom
core-js 2.6.12Outdated
Standard library
object-keys 1.1.1
An Object.keys replacement, in case Object.keys is not available. From
domelementtype 2.2.0 - 2.3.0
all the types of nodes in htmlparser2's dom
sax 1.2.4Outdated
An evented streaming XML parser in JavaScript
events 3.2.0Outdated
Node's event emitter for all engines.
is-regex 1.1.4
Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag
deepmerge 1.5.2Outdated
A library for deep (recursive) merging of Javascript objects
has-tostringtag 1.0.0
Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.
has 1.0.2 - 1.0.3Outdated shortcut
is-date-object 1.0.2 - 1.0.3Outdated
Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
is-symbol 1.0.2 - 1.0.4
Determine if a value is an ES6 Symbol or not.
es-to-primitive 1.2.1
ECMAScript “ToPrimitive” algorithm. Provides ES5 and ES2015 versions.
htmlparser2 3.10.1Outdated
Fast & forgiving HTML/XML parser
object.values 1.1.5Outdated
ES2017 spec-compliant Object.values shim.
scheduler 0.19.1Outdated
Cooperative scheduler for the browser environment.
prop-types 15.7.0 - 15.7.2Outdated
Runtime type checking for React props and similar objects.
performance-now 2.0.0 - 2.1.0
Implements (based on process.hrtime).
react 16.14.0Outdated
React is a JavaScript library for building user interfaces.
array.prototype.flat 1.3.0Outdated
An ES2019 spec-compliant `Array.prototype.flat` shim/polyfill/replacement that works as far down as ES3.
process 0.11.10
process information for node.js and browsers
object-is 1.1.4 - 1.1.5
ES2015-compliant shim for - differentiates between -0 and +0
hoist-non-react-statics 2.5.1 - 2.5.5Outdated
Copies non-react specific statics from a child component to a parent component
immutable 3.7.6Outdated
Immutable Data Collections
invariant 2.2.3 - 2.2.4
setimmediate 1.0.5
A shim for the setImmediate efficient script yielding API
react-transition-group 3.0.0Outdated
A react component toolset for managing animations
dom-helpers 3.4.0Outdated
tiny modular DOM lib for ie9+
classnames 2.2.6Outdated
A simple utility for conditionally joining classNames together
memoize-one 5.1.0 - 5.1.1Outdated
A memoization library which only remembers the latest invocation
query-string 5.1.1Outdated
Parse and stringify URL query strings
symbol-observable 1.1.0 - 1.2.0Outdated
Symbol.observable ponyfill
@popperjs/core 2.11.3 - 2.11.5Outdated
Tooltip and Popover Positioning Engine
whatwg-fetch 3.5.0Outdated
A window.fetch polyfill.
react-router 5.2.0Outdated
Declarative routing for React
lodash.camelcase 4.3.0
The lodash method `_.camelCase` exported as a module.
stream-browserify 1.0.0 - 2.0.2Outdated
the stream module from node core for browsers
react-router-dom 5.2.0Outdated
Declarative routing for React web applications
strict-uri-encode 1.1.0Outdated
A stricter URI encode adhering to RFC 3986
react-fast-compare 3.1.0 - 3.2.0Outdated
Fastest deep equal comparison for React. Great for React.memo & shouldComponentUpdate. Also really fast general-purpose deep comparison.
warning 4.0.3
A mirror of Facebook's Warning
tiny-invariant 1.1.0Outdated
A tiny invariant function
es5-ext 0.10.24 - 0.10.49Outdated
ECMAScript extensions and shims
crypto-browserify 1.0.9 - 2.0.0Outdated
implementation of crypto for the browser
timers-browserify 2.0.10 - 2.0.12
timers module for browserify
history 1.2.0 - 1.4.0Outdated
Manage session history with JavaScript
immediate 2.6.2Outdated
A cross browser microtask library
redux 4.0.5Outdated
Predictable state container for JavaScript apps
lodash-es 4.17.21
Lodash exported as ES modules.
js-cookie 2.2.0Outdated
A simple, lightweight JavaScript API for handling cookies
react-popper 2.2.5Outdated
Official library to use Popper on React projects
react-lifecycles-compat 3.0.4
Backwards compatibility polyfill for React class components
react-select 3.0.1Outdated
A Select control built with and for ReactJS
babel-runtime 6.18.0 - 6.26.0
babel selfContained runtime
react-redux 7.2.2Outdated
Official React bindings for Redux
raf 3.4.0 - 3.4.1
requestAnimationFrame polyfill for node and the browser
fbjs 2.0.0 - 3.0.1Outdated
A collection of utility libraries used by other Facebook JS projects
resolve-pathname 3.0.0
Resolve URL pathnames using JavaScript
value-equal 1.0.1
Are these two JavaScript values equal?
jwt-decode 2.2.0Outdated
Decode JWT tokens, mostly useful for browser applications.
isomorphic-fetch 2.1.1 - 3.0.0
Isomorphic WHATWG Fetch API, for Node & Browserify
redux-thunk 2.1.1 - 2.3.0Outdated
Thunk middleware for Redux.
mini-create-react-context 0.3.3 - 0.4.1
Smaller Polyfill for the proposed React context API
react-dropzone 4.3.0Outdated
Simple HTML5 drag-drop zone with React.js
@apollo/client 3.0.0 - 3.7.1Outdated
A fully-featured caching GraphQL client.
vue-loader 16.0.0 - 17.0.0Outdated
> webpack loader for Vue Single-File Components
attr-accept 1.1.3Outdated
JavaScript implementation of the "accept" attribute for HTML5 <input type="file">
consolidated-events 1.1.1Outdated
Manage multiple event handlers using few event listeners
tabbable 5.2.1Outdated
Returns an array of all tabbable DOM nodes within a containing node.
lodash.isarray 3.0.4Outdated
The lodash method `_.isArray` exported as a module.
formik 1.0.0 - 2.2.9Outdated
Build forms in React, without the tears
exenv 1.2.1 - 1.2.2
React's ExecutionEnvironment module extracted for use in other packages & components
shallow-equal 1.2.0 - 1.2.1Outdated
Typescript-compatible minimalistic shallow equality check for arrays/objects
enzyme-shallow-equal 1.0.4Outdated
Adaptation of react-addons-shallow-compare, for independent usage
react-side-effect 2.1.1Outdated
Create components whose prop changes map to a global side effect
react-helmet 6.1.0
A document head manager for React
airbnb-prop-types 2.4.0 - 2.16.0
Custom React PropType validators that we use at Airbnb.
universal-cookie 2.2.0Outdated
Universal cookies for JavaScript
react-modal 3.11.2Outdated
Accessible modal dialog component for React.JS
react-beautiful-dnd 2.6.0 - 6.0.2Outdated
Beautiful and accessible drag and drop for lists with React
intersection-observer 0.5.1Outdated
A polyfill for IntersectionObserver
react-use 8.1.4 - 17.4.0Outdated
Collection of React Hooks
@datadog/browser-rum-core 4.6.0 - 4.23.2Outdated
Datadog browser RUM core utilities.
rc-select 8.6.2 - 9.2.3Outdated
React Select
focus-trap 6.7.1Outdated
Trap focus within a DOM node.
to-no-case 1.0.2
Remove any existing casing from a string.
redux-persist 6.0.0
persist and rehydrate redux stores
to-space-case 1.0.0
Convert a string to space case.
recompose 0.18.0 - 0.25.1Outdated
A React utility belt for function components and higher-order components
launchdarkly-js-client-sdk 2.18.1Outdated
LaunchDarkly SDK for JavaScript
react-portal 4.2.1 - 4.2.2
To make your life with React Portals easier.
react-device-detect 1.8.6 - 1.16.0Outdated
Detect device type and render your component according to it
@chakra-ui/utils 1.8.2 - 2.0.11Outdated
Common utilities and types for Chakra UI
document.contains 1.0.2
Polyfill/shim for `document.contains`
react-outside-click-handler 1.3.0
A React component for dealing with clicks outside its subtree
react-async-script 1.2.0
A composition mixin for loading scripts asynchronously for React
react-with-direction 1.3.1 - 1.4.0
Components to provide and consume RTL or LTR direction in React
react-moment-proptypes 1.6.0 - 1.8.1
React proptype for moment module
focus-trap-react 8.4.2Outdated
A React component that traps focus.
react-with-styles 3.2.1Outdated
[![Build Status][travis-svg]][travis-url] [![dependency status][deps-svg]][deps-url] [![dev dependency status][dev-deps-svg]][dev-deps-url] [![License][license-image]][license-url] [![Downloads][downloads-image]][downloads-url]
react-dates 20.2.5Outdated
A responsive and accessible date range picker component built with React
to-camel-case 1.0.0
Convert a string to camel case.
global-cache 1.2.1
Sometimes you have to do horrible things, like use the global object to share a singleton. Abstract that away, with this!
react-with-styles-interface-css 4.0.2 - 4.0.3Outdated
Interface for react-with-styles outputting CSS
is-touch-device 1.0.0 - 1.0.1
Is the current JS environment a touch device?
launchdarkly-react-client-sdk 2.20.1 - 2.20.2Outdated
LaunchDarkly SDK for React
rollbar 0.2.0 - 0.6.6Outdated
Effortlessly track and debug errors in your JavaScript applications with Rollbar. This package includes advanced error tracking features and an intuitive interface to help you identify and fix issues more quickly.
reduce-reducers 0.4.3Outdated
Reduce multiple reducers into a single reducer
react-native-web 0.10.0 - 0.11.7Outdated
React Native for Web
react-themeable 1.1.0
Utility for making React components easily themeable
react-autosuggest 10.1.0
WAI-ARIA compliant React autosuggest component
section-iterator 2.0.0
Simple iterator for flat and multi section lists
redux-actions 2.6.5Outdated
Flux Standard Action utlities for Redux
serialize-query-params 2.0.0 - 2.0.2
A library for simplifying encoding and decoding URL query parameters.
react-image-crop 4.0.0 - 4.0.1Outdated
A responsive image cropping tool for React
redux-form 3.0.8 - 3.1.7Outdated
A higher order component decorator for forms using Redux and React
moment-range 3.1.1Outdated
Fancy date ranges for Moment.js
just-curry-it 3.0.0 - 5.1.0Outdated
return a curried function
@hot-loader/react-dom 16.14.0Outdated
The Hot version of React-DOM
autosuggest-highlight 2.1.1Outdated
Utilities for highlighting text in autosuggest and autocomplete components
react-html-parser 2.0.2
Parse HTML into React components
@fingerprintjs/fingerprintjs 3.0.1 - 3.3.6Outdated
Browser fingerprinting library with the highest accuracy and stability
@splidejs/splide 4.0.0 - 4.1.3Outdated
Splide is a lightweight, flexible and accessible slider/carousel. No dependencies, no Lighthouse errors.
analytics-utils 0.0.7 - 0.0.11Outdated
Analytics utility functions used by 'analytics' module
mailcheck 1.1.1
A standalone module that suggests a right domain when your users misspell it in an email address.
svg4everybody 2.1.9
Use external SVG spritemaps in any browser
local-storage 1.4.2Outdated
A simplified localStorage API that just works
reaptcha 1.7.2Outdated
Google reCAPTCHA for React
@r1s/sarsaparilla x.x.x
qhistory x.x.x
draft-js x.x.x
@turf/turf x.x.x
redux-idle-monitor x.x.x
redux-blueprint x.x.x
react-infinite x.x.x
lodash.isfinite x.x.x
xmldoc x.x.x
browser-update x.x.x
react-draft-wysiwyg x.x.x
draftjs-to-html x.x.x
html-to-draftjs x.x.x
lodash.repeat x.x.x
lodash._root x.x.x
es-shim-unscopables x.x.x
redux-mux x.x.x
localsync x.x.x