samaritans.org 53 packages

Last scanned on Oct 27 at 06:25 PM
lodash 4.17.16VulnerableOutdated
Lodash modular utilities.
License
MIT
Footprint
1 KB
Vulnerabilities
Command Injection in lodash
Affected versions >=0 <4.17.21
Regular Expression Denial of Service (ReDoS) in lodash
Affected versions >=0 <4.17.21
Prototype Pollution in lodash
Affected versions >=3.7.0 <4.17.19
Matched Modules
Version distribution in production
3 846
4.17.16
946
4.17.21
337
4.17.20
322
4.17.15
302
4.17.19
301
4.17.13
moment-timezone 0.5.34VulnerableOutdated
Parse and display moments in any timezone.
react-is 16.3.0 - 16.13.1Outdated
Brand checking of React Elements.
@babel/runtime 7.18.0 - 7.20.0Outdated
babel's modular runtime helpers
+1
hzoo
existentialism
nicolo-ribaudo
get-intrinsic 1.1.0 - 1.1.1Outdated
Get and robustly cache all JS language-level intrinsics at first require time
function-bind 1.1.0 - 1.1.1Outdated
Implementation of Function.prototype.bind
call-bind 1.0.2Outdated
Robustly `.call.bind()` a function
object-inspect 1.12.1Outdated
string representations of objects in node and the browser
has-symbols 1.0.2 - 1.0.3
Determine if the JS environment has Symbol support. Supports spec, or shams.
has-property-descriptors 1.0.0Outdated
Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD.
es-abstract 1.20.0 - 1.20.2Outdated
ECMAScript spec abstract operations.
define-properties 1.1.4Outdated
Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.
is-callable 1.2.4Outdated
Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.
object.assign 4.1.1 - 4.1.2Outdated
ES6 spec-compliant Object.assign shim. From https://github.com/es-shims/es6-shim
has-tostringtag 1.0.0Outdated
Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.
object-keys 1.1.0 - 1.1.1
An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim
deepmerge 1.5.2Outdated
A library for deep (recursive) merging of Javascript objects
core-js 2.6.12Outdated
Standard library
is-regex 1.1.4
Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag
is-date-object 1.0.5
Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
es-to-primitive 1.2.0 - 1.2.1
ECMAScript “ToPrimitive” algorithm. Provides ES5 and ES2015 versions.
function.prototype.name 1.1.2 - 1.1.5Outdated
An ES2015 spec-compliant `Function.prototype.name` shim
functions-have-names 1.1.1 - 1.2.3
Does this JS environment support the `name` property on functions?
object.values 1.0.0 - 1.1.5Outdated
ES2017 spec-compliant Object.values shim.
has 1.0.1 - 1.0.3Outdated
Object.prototype.hasOwnProperty.call shortcut
tarruda
tarruda
scheduler 0.15.0 - 0.23.0
Cooperative scheduler for the browser environment.
array.prototype.flat 1.3.0Outdated
An ES2019 spec-compliant `Array.prototype.flat` shim/polyfill/replacement that works as far down as ES3.
prop-types 15.8.0 - 15.8.1
Runtime type checking for React props and similar objects.
react 16.13.0 - 17.0.2Outdated
React is a JavaScript library for building user interfaces.
performance-now 0.1.3 - 2.1.0
Implements performance.now (based on process.hrtime).
meryn
meryn
object-is 1.1.0 - 1.1.5Outdated
ES2015-compliant shim for Object.is - differentiates between -0 and +0
hoist-non-react-statics 3.3.1 - 3.3.2
Copies non-react specific statics from a child component to a parent component
mridgway
mridgway
@sentry/utils 7.2.0Outdated
Utilities for all Sentry JavaScript SDKs
+8
benvinegar
billyvg
mitsuhiko
lodash-es 4.17.21
Lodash exported as ES modules.
raf 1.0.0 - 3.4.1
requestAnimationFrame polyfill for node and the browser
react-lifecycles-compat 3.0.4
Backwards compatibility polyfill for React class components
fb
sophiebits
@sentry/hub 7.0.0 - 7.14.2Outdated
Sentry hub which handles global state managment.
+8
benvinegar
billyvg
mitsuhiko
@sentry/tracing 7.2.0Outdated
Sentry Performance Monitoring Package
+8
benvinegar
billyvg
mitsuhiko
exenv 1.1.0 - 1.2.2
React's ExecutionEnvironment module extracted for use in other packages & components
enzyme-shallow-equal 1.0.4Outdated
Adaptation of react-addons-shallow-compare, for independent usage
airbnb-prop-types 2.16.0
Custom React PropType validators that we use at Airbnb.
react-modal 3.14.1 - 3.16.1
Accessible modal dialog component for React.JS
consolidated-events 1.0.0 - 1.1.1Outdated
Manage multiple event handlers using few event listeners
document.contains 1.0.2
Polyfill/shim for `document.contains`
react-outside-click-handler 1.3.0
A React component for dealing with clicks outside its subtree
+2
brieb
airbnbeng
lencioni
react-with-direction 1.0.0 - 1.4.0
Components to provide and consume RTL or LTR direction in React
+4
brieb
airbnbeng
lencioni
react-moment-proptypes 1.6.0 - 1.8.1
React proptype for moment module
react-with-styles 4.2.0Outdated
[![Build Status][travis-svg]][travis-url] [![dependency status][deps-svg]][deps-url] [![dev dependency status][dev-deps-svg]][dev-deps-url] [![License][license-image]][license-url] [![Downloads][downloads-image]][downloads-url]
react-dates 21.8.0
A responsive and accessible date range picker component built with React
+4
lencioni
ljharb
ahuth
global-cache 1.1.0 - 1.2.1
Sometimes you have to do horrible things, like use the global object to share a singleton. Abstract that away, with this!
react-with-styles-interface-css 6.0.0
Interface for react-with-styles outputting CSS
@stimulus/core 0.6.0Outdated
Stimulus JavaScript framework: Core library
dhh
dhh
lazyframe 2.2.0 - 2.2.7
Dependency-free library for lazyloading iframes