About
Community
remax.com
96 packages
Last scanned on Oct 27 at 06:34 PM
Update
Name
Size
Popularity
Severity
lodash
4.17.16
Vulnerable
Outdated
Lodash modular utilities.
Script
https://remax.com/_nuxt/vendors/app.c98a5fb.js
License
MIT
Footprint
5 KB
Vulnerabilities
High
GHSA-35jh-r3h4-6jhm
Command Injection in lodash
Affected versions >=0 <4.17.21
Moderate
GHSA-29mw-wpgm-hmr9
Regular Expression Denial of Service (ReDoS) in lodash
Affected versions >=0 <4.17.21
High
GHSA-p6mc-m468-83gw
Prototype Pollution in lodash
Affected versions >=3.7.0 <4.17.19
Matched Modules
Version distribution in production
3 846
4.17.16
946
4.17.21
337
4.17.20
322
4.17.15
302
4.17.19
301
4.17.13
Also used on 4830 websites
skype.com
20 packages
sentry.io
157 packages
pinterest.com
56 packages
pinimg.com
52 packages
Repository
Homepage
More
modules
stdlib
util
axios
0.21.1
Vulnerable
Outdated
Promise based HTTP client for the browser and node.js
xhr
http
ajax
promise
node
+1
jsonwebtoken
8.5.0 - 8.5.1
Vulnerable
Outdated
JSON Web Token implementation (symmetric and asymmetric)
jwt
es5-ext
0.10.24 - 0.10.49
Vulnerable
Outdated
ECMAScript extensions and shims
ecmascript
ecmascript5
ecmascript6
es5
es6
+11
medikoo
semver
5.7.0 - 6.3.0
Outdated
The semantic version parser used by npm.
+2
ms
2.1.2 - 2.1.3
Tiny millisecond conversion utility
+5
readable-stream
3.6.0
Outdated
Node.js Streams, a user-land copy of the stream library from Node.js
readable
stream
pipe
string_decoder
1.1.0 - 1.3.0
The string_decoder module from Node core
string
decoder
browser
browserify
+1
isarray
1.0.0 - 2.0.5
Array#isArray for older browsers
browser
isarray
array
juliangruber
inherits
2.0.3 - 2.0.4
Browser-friendly inheritance fully compatible with standard node.js inherits()
inheritance
class
klass
oop
object-oriented
+3
isaacs
qs
6.10.0 - 6.10.5
Outdated
A querystring parser that supports nesting and arrays, with a depth limit
querystring
qs
query
url
parse
+1
buffer
4.6.0 - 4.9.2
Outdated
Node.js Buffer API, for the browser
arraybuffer
browser
browserify
buffer
compatible
+2
feross
@babel/runtime
7.13.17 - 7.16.0
Outdated
babel's modular runtime helpers
+1
get-intrinsic
1.1.0 - 1.1.1
Outdated
Get and robustly cache all JS language-level intrinsics at first require time
javascript
ecmascript
es
js
intrinsic
+2
ljharb
function-bind
1.1.0 - 1.1.1
Outdated
Implementation of Function.prototype.bind
function
bind
shim
es5
cookie
0.2.4 - 0.4.2
Outdated
HTTP server cookie parsing and serialization
cookie
cookies
dougwilson
call-bind
1.0.2
Outdated
Robustly `.call.bind()` a function
javascript
ecmascript
es
js
callbind
+8
ljharb
object-inspect
1.11.0 - 1.11.1
Outdated
string representations of objects in node and the browser
inspect
util.inspect
object
stringify
pretty
core-util-is
1.0.2 - 1.0.3
The `util.is*` functions introduced in Node v0.12.
util
isBuffer
isArray
isNumber
isString
+4
isaacs
has-symbols
1.0.2 - 1.0.3
Determine if the JS environment has Symbol support. Supports spec, or shams.
Symbol
symbols
typeof
sham
polyfill
+3
ljharb
side-channel
1.0.4
Outdated
Store information about any JS value in a side channel. Uses WeakMap if available.
weakmap
map
side
channel
metadata
ljharb
base64-js
1.3.0 - 1.5.1
Base64 encoding/decoding in pure JS
base64
events
3.0.0 - 3.3.0
Node's event emitter for all engines.
events
eventEmitter
eventDispatcher
listeners
is-buffer
1.1.4 - 1.1.6
Outdated
Determine if an object is a Buffer
arraybuffer
browser
browser buffer
browserify
buffer
+10
feross
deepmerge
4.2.2
Outdated
A library for deep (recursive) merging of Javascript objects
merge
deep
extend
copy
clone
+1
tehshrike
core-js
3.23.0 - 3.23.2
Outdated
Standard library
ES3
ES5
ES6
ES7
ES2015
+39
zloirock
util
0.10.0 - 0.12.5
Node.js's util module for all engines
util
+3
has
1.0.1 - 1.0.3
Outdated
Object.prototype.hasOwnProperty.call shortcut
tarruda
jws
3.2.1 - 4.0.0
Implementation of JSON Web Signatures
jws
json
web
signatures
+4
jwa
1.4.1
Outdated
JWA implementation (supports all JWS algorithms)
jwa
jws
jwt
rsa
ecdsa
+1
+4
lodash.isplainobject
4.0.6
The lodash method `_.isPlainObject` exported as a module.
lodash-modularized
isplainobject
minimalistic-assert
1.0.0 - 1.0.1
minimalistic-assert ===
ecdsa-sig-formatter
1.0.10 - 1.0.11
Translate ECDSA signatures between ASN.1/DER and JOSE-style concatenation
ecdsa
der
asn.1
jwt
jwa
+2
d2l-travis-deploy
buffer-equal-constant-time
1.0.0 - 1.0.1
Constant-time comparison of Buffers
buffer
equal
constant-time
crypto
lodash.isstring
4.0.1
The lodash method `_.isString` exported as a module.
lodash-modularized
isstring
sha.js
2.4.9 - 2.4.11
Streamable SHA hashes in pure javascript
lodash.isboolean
3.0.1 - 3.0.3
The lodash method `_.isBoolean` exported as a module.
lodash-modularized
isboolean
asn1.js
5.2.0 - 5.4.1
ASN.1 encoder and decoder
asn.1
der
lodash.includes
4.3.0
The lodash method `_.includes` exported as a module.
lodash-modularized
includes
hash-base
3.0.4 - 3.1.0
abstract base class for hash-streams
hash
stream
+1
elliptic
6.5.4
Outdated
EC cryptography
EC
Elliptic
curve
Cryptography
indutny
@sentry/utils
6.19.5 - 6.19.7
Outdated
Utilities for all Sentry JavaScript SDKs
+8
lodash.isnumber
3.0.1 - 3.0.3
The lodash method `_.isNumber` exported as a module.
lodash-modularized
isnumber
hash.js
1.1.2 - 1.1.7
Various hash functions that could be run by both browser and node
hash
sha256
sha224
hmac
indutny
@sentry/core
6.19.7
Outdated
Base implementation for all Sentry JavaScript SDKs
+8
hmac-drbg
1.0.1
Deterministic random bit generator (hmac)
hmac
drbg
prng
indutny
lodash-es
4.17.21
Lodash exported as ES modules.
es6
modules
stdlib
util
des.js
1.0.1
Outdated
DES implementation
DES
3DES
EDE
CBC
indutny
md5.js
1.1.0 - 1.3.5
node style md5 on pure JavaScript
crypto
md5
+2
pbkdf2
3.1.0 - 3.1.2
This library provides the functionality of PBKDF2 with the ability to use any supported hashing algorithm returned from crypto.getHashes()
pbkdf2
kdf
salt
hash
+3
parse-asn1
5.1.6
Outdated
utility library for parsing asn1 files for use with browserify-sign.
+2
cipher-base
1.0.4
abstract base class for crypto-streams
cipher
stream
browserify-sign
2.4.0 - 2.8.0
Outdated
adds node crypto signing for browsers
+2
browserify-aes
0.4.0 - 0.8.1
Outdated
aes, for browserify
aes
crypto
browserify
+2
evp_bytestokey
1.0.3
The insecure key derivation algorithm from OpenSSL
crypto
openssl
browserify-rsa
4.1.0
RSA for browserify
+2
timers-browserify
2.0.9
Outdated
timers module for browserify
timers
browserify
browser
+36
create-ecdh
3.0.0 - 4.0.4
createECDH but browserifiable
diffie
hellman
diffiehellman
ECDH
+2
public-encrypt
4.0.3
browserify version of publicEncrypt & privateDecrypt
+2
diffie-hellman
1.1.2
Outdated
pure js diffie-hellman
diffie
hellman
diffiehellman
dh
+2
browserify-des
1.0.2
browserify-des ===
miller-rabin
1.1.0 - 4.0.1
Miller Rabin algorithm for primality test
prime
miller-rabin
bignumber
randomfill
1.0.0 - 1.0.4
random fill from browserify stand alone
crypto
random
micromark
2.0.0 - 2.8.0
Outdated
small commonmark compliant markdown parser with positional info and concrete tokens
commonmark
compiler
gfm
html
lexer
+13
wooorm
ufo
0.7.9 - 0.7.11
Outdated
URL utils for humans
pi0
md5
2.2.1 - 2.3.0
js function for hashing messages with MD5
crypt
0.0.0 - 0.0.2
utilities for encryption and hashing
pvorb
charenc
0.0.0 - 0.0.2
character encoding utilities
pvorb
p-is-promise
3.0.0 - 4.0.0
Check if something is a promise
promise
is
detect
check
kind
+7
sindresorhus
@sentry/browser
6.19.5 - 6.19.7
Outdated
Official Sentry SDK for browsers
+8
unfetch
4.1.0 - 4.2.0
Outdated
Bare minimum fetch polyfill in 500 bytes
fetch
polyfill
xhr
ajax
developit
vue
1.0.9 - 2.7.13
Outdated
The progressive JavaScript framework for building modern web UI.
vue
web-vitals
1.1.0 - 2.1.4
Outdated
Easily measure performance metrics in JavaScript
crux
performance
metrics
Core Web Vitals
CLS
+5
@sentry/hub
6.19.5 - 6.19.7
Outdated
Sentry hub which handles global state managment.
+8
vue-router
3.2.0 - 3.5.4
Outdated
> - This is the repository for Vue Router 4 (for Vue 3) > - For Vue Router 3 (for Vue 2) see [vuejs/vue-router](https://github.com/vuejs/vue-router).
@sentry/minimal
4.3.3 - 6.19.7
Sentry minimal library that can be used in other packages
+8
@sentry/integrations
5.28.0 - 6.2.5
Outdated
Pluggable integrations that can be used to enhance JS SDKs
+8
@hookform/resolvers
1.1.0
Outdated
React Hook Form validation resolvers: Yup, Joi, Superstruct, Zod, Vest, Class Validator, io-ts, Nope, computed-types, TypeBox, arktype and Typanion
scheme
validation
scheme-validation
hookform
react-hook-form
+14
xss
1.0.7 - 1.0.10
Outdated
Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
sanitization
xss
sanitize
sanitisation
input
+8
leizongmin
cssfilter
0.0.10
Sanitize untrusted CSS with a configuration specified by a Whitelist. 根据白名单过滤CSS
sanitization
xss
sanitize
sanitisation
input
+9
leizongmin
fp-ts
2.6.6 - 2.9.5
Outdated
Functional programming in TypeScript
typescript
algebraic-data-types
functional-programming
gcanti
xstate
4.7.0 - 4.33.6
Outdated
Finite State Machines and Statecharts for the Modern Web.
statechart
state machine
finite state machine
finite automata
scxml
+2
react-query
0.0.11 - 0.0.15
Outdated
Hooks for managing, caching and syncing asynchronous and remote data in React
linkifyjs
2.1.4 - 2.1.9
Outdated
Find URLs, email addresses, #hashtags and @mentions in plain-text strings, then convert them into HTML <a> links.
autolink
email
hashtag
html
jquery
+5
nfrasser
canvas-confetti
0.2.0 - 1.6.0
Outdated
performant confetti animation in the browser
canvas
confetti
animation
burst
fireworks
+2
kirilv
vue-no-ssr
1.1.1
Vue component to wrap non SSR friendly components
vue-client-only
2.0.0 - 2.1.0
Vue component to wrap non SSR friendly components
egoist
marker-clusterer-plus
2.1.2 - 2.1.4
Clone of markerclustererplus, but works with npm out of the box
google-marker-clusterer-plus
google
maps
cluster
clusterer
+1
frostwind
vuelidate
0.5.0 - 0.7.7
Simple, lightweight model-based validation for Vue.js
vuejs-datepicker
1.6.0 - 1.6.2
A simple Vue.js datepicker component. Supports disabling of dates, inline mode, translations
vue
datepicker
date-picker
calendar
charliekassel
cookie-universal
2.2.1 - 2.2.2
Universal cookie plugin, perfect for SSR
universal cookie
SSR cookie
node cookie
browser cookie
cookies
+1
microcipcip
@tannin/plural-forms
1.0.0 - 1.1.0
Compiles a function to compute the plural forms index for a given value
aduth
@imgix/js-core
3.6.0 - 3.6.1
Outdated
A JavaScript client library for generating image URLs with imgix
+11
vue2-google-maps
0.10.6 - 0.10.7
This is a google map component for Vue.js, updated for Vue 2 compatibility
xkjyeah
vue2-touch-events
3.2.0 - 3.2.2
Outdated
Simple touch events support for vueJS2
vue
touch
tap
swipe
longtap
jerrybendy
react-amphtml
3.1.0 - 4.0.2
Use amphtml components inside your React apps easily!
react
amphtml
dfrankland
Popular search queries
webpack.js.org
url
react-scripts
react
lottie-api
react-helmet-async
+7 packages
github.com
color-convert
@headlessui/react
hoist-non-react-statics
reactstrap
lit-html
+60 packages
pinterest.com
lodash
relay-runtime
react-relay
react-use
lodash-es
+51 packages
Popular packages
react
React is a JavaScript library for building user interfaces.
+6 634 websites
core-js
Standard library
+10 238 websites
es5-ext
ECMAScript extensions and shims
+10 229 websites
@babel/runtime
babel's modular runtime helpers
+8 352 websites
lodash
Lodash modular utilities.
+4 826 websites
axios
Promise based HTTP client for the browser and node.js
+4 742 websites