About
Community
thirdweb.com
102 packages
Last scanned on Dec 13 at 12:00 PM
Update
Name
Size
Popularity
Severity
crypto-js
3.1.8 - 3.3.0
Vulnerable
Outdated
JavaScript library of crypto standards.
Script
https://thirdweb.com/_next/static/chunks/9929-17a9f082f5d28071.js
License
MIT
Footprint
39 KB
Vulnerabilities
Critical
GHSA-xwcq-pm8m-c4vf
crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard
Affected versions >=0 <4.2.0
Matched Modules
Version distribution in production
457
4.1.0
457
4.1.1
185
3.3.0
162
3.1.8
143
3.2.1
143
4.0.0
Also used on 738 websites
pubmatic.com
4 packages
tiktok.com
91 packages
redd.it
180 packages
www.reddit.com
183 packages
Repository
Homepage
More
security
crypto
Hash
MD5
SHA1
+15
evanvosberg
next
13.0.0
Vulnerable
Outdated
The React Framework
debug
4.3.2 - 4.3.4
Lightweight debugging utility for Node.js and the browser
debug
log
debugger
+1
tslib
1.2.0 - 2.4.0
Outdated
Runtime library for TypeScript helper functions
TypeScript
Microsoft
compiler
language
javascript
+2
+5
color-convert
2.0.0 - 2.0.1
Plain color conversion functions
color
colour
convert
converter
conversion
+7
qix
ms
2.1.2 - 2.1.3
Tiny millisecond conversion utility
+5
react-is
16.3.0 - 16.13.1
Outdated
Brand checking of React Elements.
react
+1
camelcase
5.3.1
Outdated
Convert a dash/dot/underscore/space separated string to camelCase or PascalCase: `foo-bar` → `fooBar`
camelcase
camel-case
camel
case
dash
+9
sindresorhus
inherits
2.0.4
Browser-friendly inheritance fully compatible with standard node.js inherits()
inheritance
class
klass
oop
object-oriented
+3
isaacs
form-data
1.0.0 - 4.0.0
A library to create readable "multipart/form-data" streams. Can be used to submit forms and file uploads to other web applications.
+2
mime
2.6.0 - 3.0.0
Outdated
A comprehensive library for mime-type mapping
extension
file
mime
mime-db
mimetypes
+1
broofa
buffer
5.7.0 - 6.0.3
Node.js Buffer API, for the browser
arraybuffer
browser
browserify
buffer
compatible
+2
feross
@babel/runtime
7.20.0
Outdated
babel's modular runtime helpers
+1
get-intrinsic
1.1.3
Outdated
Get and robustly cache all JS language-level intrinsics at first require time
javascript
ecmascript
es
js
intrinsic
+2
ljharb
function-bind
1.1.0 - 1.1.1
Outdated
Implementation of Function.prototype.bind
function
bind
shim
es5
is-arrayish
0.3.1 - 0.3.2
Determines if an object can be used as an array
is
array
duck
type
arrayish
+4
qix
path-to-regexp
6.1.0 - 6.2.0
Outdated
Express style path to RegExp utility
express
regexp
route
routing
+2
call-bind
1.0.1 - 1.0.2
Outdated
Robustly `.call.bind()` a function
javascript
ecmascript
es
js
callbind
+8
ljharb
fast-deep-equal
3.0.0 - 3.1.3
Fast deep equal
fast
equal
deep-equal
esp
has-symbols
1.0.2 - 1.0.3
Determine if the JS environment has Symbol support. Supports spec, or shams.
Symbol
symbols
typeof
sham
polyfill
+3
ljharb
has-property-descriptors
1.0.0
Outdated
Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD.
property
descriptors
has
environment
env
+2
ljharb
es-abstract
1.18.7 - 1.20.4
Outdated
ECMAScript spec abstract operations.
ECMAScript
ES
abstract
operation
abstract operation
+4
ljharb
base64-js
1.3.0 - 1.5.1
Base64 encoding/decoding in pure JS
base64
define-properties
1.1.3 - 1.1.4
Outdated
Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.
Object.defineProperty
Object.defineProperties
object
property descriptor
descriptor
+2
ljharb
is-callable
1.2.7
Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.
Function
function
callable
generator
generator function
+5
ljharb
has-tostringtag
1.0.0
Outdated
Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.
javascript
ecmascript
symbol
symbols
tostringtag
+1
ljharb
which-typed-array
1.1.6 - 1.1.8
Outdated
Which kind of Typed Array is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.
array
TypedArray
typed array
which
typed
+13
ljharb
object-keys
1.1.0 - 1.1.1
An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim
Object.keys
keys
ES5
shim
ljharb
is-typed-array
1.1.7 - 1.1.9
Outdated
Is this value a JS Typed Array? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag.
array
TypedArray
typed array
is
typed
+13
available-typed-arrays
1.0.5
Outdated
Returns an array of Typed Array names that are available in the current environment
typed
arrays
Float32Array
Float64Array
Int8Array
+8
ljharb
util
0.12.0 - 0.12.5
Node.js's util module for all engines
util
+3
eventemitter3
2.0.0 - 4.0.7
Outdated
EventEmitter3 focuses on performance while maintaining a Node.js AND browser compatible interface.
EventEmitter
EventEmitter2
EventEmitter3
Events
addEventListener
+10
for-each
0.3.3
A better forEach
scheduler
0.21.0 - 0.23.0
Outdated
Cooperative scheduler for the browser environment.
react
+1
pako
0.2.9 - 2.0.1
Outdated
zlib port to javascript - fast, modularized, with browser support
zlib
deflate
inflate
gzip
vitaly
has
1.0.1 - 1.0.3
Outdated
Object.prototype.hasOwnProperty.call shortcut
tarruda
is-arguments
1.1.1
Is this an arguments object? It's a harder question than you think.
arguments
js
javascript
is-arguments
is
+1
ljharb
react
17.0.0 - 18.2.0
Outdated
React is a JavaScript library for building user interfaces.
react
+1
@webassemblyjs/wasm-parser
1.0.0 - 1.5.9
Outdated
WebAssembly binary format parser
webassembly
javascript
ast
parser
wasm
xtuc
react-dom
18.0.0 - 18.2.0
Outdated
React package for working with the DOM.
react
+2
is-generator-function
1.0.10
Determine if a function is a native generator function.
generator
generator function
es6
es2015
yield
+2
ljharb
color
4.2.2 - 4.2.3
Color conversion and manipulation with CSS string support
color
colour
css
qix
minimalistic-assert
1.0.0 - 1.0.1
minimalistic-assert ===
object-is
1.1.0 - 1.1.5
Outdated
ES2015-compliant shim for Object.is - differentiates between -0 and +0
is
Object.is
equality
sameValueZero
ES6
+4
ljharb
@emotion/memoize
0.7.5 - 0.8.0
Outdated
emotion's memoize utility
+1
color-string
1.5.3 - 1.9.1
Parser and generator for CSS color strings
color
colour
rgb
css
qix
hoist-non-react-statics
3.3.1 - 3.3.2
Copies non-react specific statics from a child component to a parent component
react
mridgway
simple-swizzle
0.2.1 - 0.2.2
Simply swizzle your arguments
argument
arguments
swizzle
swizzling
parameter
+3
qix
assert
2.0.0
Outdated
The assert module from Node.js, for the browser.
assert
browser
+3
@emotion/serialize
1.0.2 - 1.1.1
Outdated
serialization utils for emotion
+1
tiny-invariant
0.0.2 - 1.3.1
Outdated
A tiny invariant function
invariant
error
assert
asserts
alexreardon
@emotion/utils
1.0.0 - 1.2.0
Outdated
internal utils for emotion
+1
lodash.clonedeep
4.5.0
The lodash method `_.cloneDeep` exported as a module.
lodash-modularized
clonedeep
hash.js
1.1.2 - 1.1.7
Various hash functions that could be run by both browser and node
hash
sha256
sha224
hmac
indutny
@storybook/theming
6.5.0 - 6.5.13
Outdated
Core Storybook Components
storybook
+8
react-fast-compare
3.1.0 - 3.2.0
Outdated
Fastest deep equal comparison for React. Great for React.memo & shouldComponentUpdate. Also really fast general-purpose deep comparison.
fast
equal
react
compare
shouldComponentUpdate
+1
+12
@emotion/react
11.6.0 - 11.10.5
Outdated
> Simple styling in React.
+1
history
5.3.0
Manage session history with JavaScript
history
location
mjackson
polished
3.0.0 - 3.4.4
Outdated
A lightweight toolset for writing styles in Javascript.
styled-components
polished
emotion
glamor
css-in-js
+9
is-nan
1.3.1 - 1.3.2
ES2015-compliant shim for Number.isNaN - the global isNaN returns false positives.
is
NaN
not a number
number
isNaN
+5
ljharb
p-is-promise
3.0.0 - 4.0.0
Check if something is a promise
promise
is
detect
check
kind
+7
sindresorhus
copy-to-clipboard
3.3.0 - 3.3.1
Outdated
Copy stuff into clipboard using JS with fallbacks
clipboard
copy
browser
sudodoki
toggle-selection
1.0.5 - 1.0.6
Toggle current selected content in browser
selection
toggle
browser
deselect
sudodoki
framer-motion
7.2.0 - 7.6.2
Outdated
A simple and powerful JavaScript animation library
react animation
react
three
3d
pose
+8
+36
@reduxjs/toolkit
1.8.0 - 1.8.6
Outdated
The official, opinionated, batteries-included toolset for efficient Redux development
redux
react
starter
toolkit
reducer
+4
+2
@angular/router
10.0.0 - 14.1.3
Outdated
Angular - the routing library
angular
router
es6-object-assign
1.0.0 - 1.1.0
ECMAScript 2015 (ES6) Object.assign polyfill and ponyfill
Object
assign
ES6
ECMAScript 6
ES2015
+3
rubennorte
react-draggable
4.4.1 - 4.4.5
Outdated
React draggable component
react
draggable
react-component
framesync
4.1.0 - 6.1.2
A frame-synced render loop for JavaScript
animation
raf
popmotion
lit-element
3.0.1 - 3.2.2
Outdated
A simple base class for creating fast, lightweight web components
+11
@restart/hooks
0.3.2 - 0.4.7
Outdated
A set of utility and general-purpose React hooks.
superstruct
0.11.0 - 0.16.6
Outdated
A simple and composable way to validate data in JavaScript (and TypeScript).
api
array
assert
cast
check
+24
redux-persist
4.4.0 - 4.5.0
Outdated
persist and rehydrate redux stores
@datadog/browser-logs
4.6.0 - 4.23.2
Outdated
Send logs to Datadog from web browser pages with the browser logs SDK.
datadog
@ethersproject/bytes
5.0.0 - 5.7.0
Bytes utility functions for ethers.
Ethereum
ethers
ricmoo
@chakra-ui/utils
1.9.0
Outdated
Common utilities and types for Chakra UI
@auth0/auth0-spa-js
2.0.0
Outdated
Auth0 SDK for Single Page Applications using Authorization Code Grant Flow with PKCE
auth0
login
Authorization Code Grant Flow
PKCE
Single Page Application authentication
+1
+41
@chakra-ui/styled-system
2.2.8 - 2.3.4
Outdated
Style function for css-in-js building component libraries
theme
theming
style
system
styled
+5
@chakra-ui/theme-tools
1.0.0 - 2.0.12
Outdated
Set of helpers that makes theming and styling easier
theme
theming
color
utilities
@chakra-ui/system
1.8.0 - 2.3.0
Outdated
Chakra UI system primitives
system
styled-component
emotion
ui-component
ui
+3
@chakra-ui/theme
2.1.9 - 2.1.14
Outdated
The default theme for chakra components
theme
theming
ui mode
ui
@chakra-ui/color-mode
2.1.4 - 2.1.9
Outdated
React component and hooks for handling light and dark mode.
react
theming
ui
light mode
use dark mode
+6
@chakra-ui/hooks
2.0.6 - 2.1.0
Outdated
React hooks for Chakra components
hooks
react
chakra ui
utilities
@chakra-ui/descendant
2.1.0 - 3.0.10
Outdated
Register child nodes of a react element for better accessibility
dom
children
accessibility
descendants
child
+3
@chakra-ui/form-control
1.0.0 - 2.0.11
Outdated
React component to provide validation states to form fields
field
input
input group
form
theming
+4
@chakra-ui/transition
2.0.6 - 2.0.9
Outdated
Common transition components for Chakra UI
transition
animation
react
react transition group
motion
+1
@chakra-ui/react-env
2.0.8 - 2.0.10
Outdated
Component and hook for handling window and document object in iframe or ssr environment
dom
environment context
ssr
iframe
window
+1
@chakra-ui/layout
1.0.0 - 2.1.9
Outdated
Chakra UI layout components that give you massive speed
layout
component
grid
stack
wrap
+7
@chakra-ui/popper
2.4.0 - 3.0.8
Outdated
A React component and hooks wrapper for popper.js
react
popper
popover
tooltips
popper.js
+5
@chakra-ui/portal
1.0.3 - 1.3.0
Outdated
React component used to render children outside the DOM hierarchy of the parent component
react
portal
nested portal
z-index
layer
+1
@chakra-ui/spinner
1.2.0 - 2.0.10
Outdated
A React component for displaying spinners and loaders
spinner
loader
react
chakra ui
@chakra-ui/clickable
1.2.0 - 2.0.8
Outdated
React hook and component that implements native button interactions
chakra ui
clickable
tabbable
button
div button
@chakra-ui/tooltip
2.2.0
Outdated
A React Component for rendering dynamically positioned Tooltips
react
tooltip
component
popper
chakra ui
+2
@chakra-ui/close-button
2.0.6 - 2.0.11
Outdated
A React and Chakra UI close button component.
close-button
button
icon-button
react
close-icon
@chakra-ui/modal
1.10.0 - 2.2.2
Outdated
An accessible dialog (modal) component for React & Chakra UI
react
react component
modal
dialog
modal dialog
+8
@chakra-ui/input
1.0.0 - 2.0.12
Outdated
A React component for input text field
react
input
text field
chakra ui
react component
+2
@chakra-ui/visually-hidden
1.0.0 - 2.0.11
Outdated
A React component that visually hides its content
react
component
chakra
chakra ui
a11y
+7
@chakra-ui/media-query
3.2.5 - 3.2.7
Outdated
A React hook for changing properties or visibility of a component based on css media query
chakra ui
breakpoint
matchMedia
react
responsive
+1
@chakra-ui/button
1.0.0 - 2.0.11
Outdated
A React component that is a base button.
button
button-group
react
chakra-ui
component
+2
react-multi-carousel
1.2.10 - 2.2.5
Outdated
Production-ready, lightweight fully customizable React carousel component that rocks supports multiple items and SSR(Server-side rendering) with typescript.
react
typescript
carousel
react-component
server-side rendering
+14
yizhuang
tesseract.js
2.0.0 - 3.0.3
Outdated
Pure Javascript Multilingual OCR
+1
@n8tb1t/use-scroll-position
2.0.1 - 2.0.3
Use scroll position ReactJS hook done right
react
hooks
react-hooks
scroll
scroll-position
+2
n8tb1t
Popular search queries
webpack.js.org
url
react-scripts
react
lottie-api
react-helmet-async
+7 packages
github.com
color-convert
@headlessui/react
hoist-non-react-statics
reactstrap
lit-html
+60 packages
pinterest.com
lodash
relay-runtime
react-relay
react-use
lodash-es
+51 packages
Popular packages
react
React is a JavaScript library for building user interfaces.
+6 634 websites
core-js
Standard library
+10 238 websites
es5-ext
ECMAScript extensions and shims
+10 229 websites
@babel/runtime
babel's modular runtime helpers
+8 352 websites
lodash
Lodash modular utilities.
+4 826 websites
axios
Promise based HTTP client for the browser and node.js
+4 742 websites