About
Community
vic.gov.au
74 packages
Last scanned on Oct 27 at 07:10 PM
Update
Name
Size
Popularity
Severity
lodash
4.17.16
Vulnerable
Outdated
Lodash modular utilities.
Script
https://vic.gov.au/_nuxt/6e677b2.modern.js
https://vic.gov.au/_nuxt/2a369db.js
License
MIT
Footprint
2 KB
Vulnerabilities
High
GHSA-35jh-r3h4-6jhm
Command Injection in lodash
Affected versions >=0 <4.17.21
Moderate
GHSA-29mw-wpgm-hmr9
Regular Expression Denial of Service (ReDoS) in lodash
Affected versions >=0 <4.17.21
High
GHSA-p6mc-m468-83gw
Prototype Pollution in lodash
Affected versions >=3.7.0 <4.17.19
Matched Modules
Version distribution in production
3 846
4.17.16
946
4.17.21
337
4.17.20
322
4.17.15
302
4.17.19
301
4.17.13
Also used on 4830 websites
skype.com
20 packages
sentry.io
157 packages
pinterest.com
56 packages
pinimg.com
52 packages
Repository
Homepage
More
modules
stdlib
util
nth-check
1.0.1 - 1.0.2
Vulnerable
Outdated
Parses and compiles CSS nth-checks to highly optimized functions.
nth-child
nth
css
feedic
readable-stream
2.3.4 - 3.6.0
Outdated
Node.js Streams, a user-land copy of the stream library from Node.js
readable
stream
pipe
string_decoder
1.1.0 - 1.3.0
The string_decoder module from Node core
string
decoder
browser
browserify
+1
isarray
1.0.0 - 2.0.5
Array#isArray for older browsers
browser
isarray
array
juliangruber
inherits
2.0.3 - 2.0.4
Browser-friendly inheritance fully compatible with standard node.js inherits()
inheritance
class
klass
oop
object-oriented
+3
isaacs
is-stream
1.0.0 - 3.0.0
Outdated
Check if something is a Node.js stream
stream
type
streams
writable
readable
+5
sindresorhus
qs
6.10.2 - 6.10.3
Outdated
A querystring parser that supports nesting and arrays, with a depth limit
querystring
qs
query
url
parse
+1
buffer
4.6.0 - 4.9.2
Outdated
Node.js Buffer API, for the browser
arraybuffer
browser
browserify
buffer
compatible
+2
feross
entities
1.1.1 - 1.1.2
Outdated
Encode & decode XML and HTML entities with ease & speed
entity
decoding
encoding
html
xml
+1
feedic
@babel/runtime
7.13.6 - 7.13.7
Outdated
babel's modular runtime helpers
+1
get-intrinsic
1.1.0 - 1.1.1
Outdated
Get and robustly cache all JS language-level intrinsics at first require time
javascript
ecmascript
es
js
intrinsic
+2
ljharb
function-bind
1.1.0 - 1.1.1
Outdated
Implementation of Function.prototype.bind
function
bind
shim
es5
mime-types
2.1.0 - 2.1.35
The ultimate javascript content-type utility.
mime
types
axios
0.19.0 - 0.21.4
Outdated
Promise based HTTP client for the browser and node.js
xhr
http
ajax
promise
node
+1
cookie
0.4.1 - 0.4.2
Outdated
HTTP server cookie parsing and serialization
cookie
cookies
dougwilson
call-bind
1.0.2
Outdated
Robustly `.call.bind()` a function
javascript
ecmascript
es
js
callbind
+8
ljharb
object-inspect
1.12.0 - 1.12.1
Outdated
string representations of objects in node and the browser
inspect
util.inspect
object
stringify
pretty
core-util-is
1.0.2 - 1.0.3
The `util.is*` functions introduced in Node v0.12.
util
isBuffer
isArray
isNumber
isString
+4
isaacs
has-symbols
1.0.2 - 1.0.3
Determine if the JS environment has Symbol support. Supports spec, or shams.
Symbol
symbols
typeof
sham
polyfill
+3
ljharb
side-channel
1.0.4
Outdated
Store information about any JS value in a side channel. Uses WeakMap if available.
weakmap
map
side
channel
metadata
ljharb
parse5
3.0.3
Outdated
HTML parser and serializer.
html
parser
html5
WHATWG
specification
+10
+1
domutils
1.5.1
Outdated
Utilities for working with htmlparser2's dom
dom
htmlparser2
feedic
base64-js
1.3.0 - 1.5.1
Base64 encoding/decoding in pure JS
base64
dom-serializer
0.1.1
Outdated
render domhandler DOM nodes to a string
html
xml
render
feedic
domhandler
2.4.0 - 2.4.2
Outdated
Handler for htmlparser2 that turns pages into a dom
dom
htmlparser2
feedic
events
3.0.0 - 3.3.0
Node's event emitter for all engines.
events
eventEmitter
eventDispatcher
listeners
deepmerge
4.2.2
Outdated
A library for deep (recursive) merging of Javascript objects
merge
deep
extend
copy
clone
+1
tehshrike
domelementtype
1.2.0 - 1.3.1
Outdated
all the types of nodes in htmlparser2's dom
dom
element
types
htmlparser2
feedic
core-js
2.6.12
Outdated
Standard library
ES3
ES5
ES6
ES7
ES2015
+39
zloirock
css-select
1.2.0
Outdated
a CSS selector compiler/engine
css
selector
sizzle
feedic
util
0.10.0 - 0.12.5
Node.js's util module for all engines
util
+3
htmlparser2
3.10.0 - 3.10.1
Outdated
Fast & forgiving HTML/XML parser
html
parser
streams
xml
dom
+3
feedic
css-what
2.1.2 - 2.1.3
Outdated
a CSS selector parser
feedic
pako
1.0.6 - 1.0.11
Outdated
zlib port to javascript - fast, modularized, with browser support
zlib
deflate
inflate
gzip
vitaly
has
1.0.1 - 1.0.3
Outdated
Object.prototype.hasOwnProperty.call shortcut
tarruda
lodash.debounce
4.0.8
The lodash method `_.debounce` exported as a module.
lodash-modularized
debounce
boolbase
1.0.0
two functions: One that returns true, one that returns false
feedic
url
0.11.0
Outdated
The core `url` packaged standalone for use with Browserify.
parsing
url
analyze
path-browserify
0.0.0 - 0.0.1
Outdated
the path module from node core for browsers
browser
browserify
path
+36
assert
1.0.0 - 1.5.0
Outdated
The assert module from Node.js, for the browser.
assert
browser
+3
fast-safe-stringify
2.1.1
Safely and quickly serialize JavaScript objects
stable
stringify
JSON
JSON.stringify
safe
+1
lodash.get
4.4.1 - 4.4.2
The lodash method `_.get` exported as a module.
lodash-modularized
get
graphql
16.0.0 - 16.6.0
Outdated
A Query Language and Runtime which can target any service.
graphql
graphql-js
+5
browserify-zlib
0.2.0
Full zlib module for the browser
zlib
browserify
stack-trace
0.0.10
Outdated
Get v8 stack traces as an array of CallSite objects.
+3
winston
3.3.0 - 3.3.3
Outdated
A logger for just about everything.
winston
logger
logging
logs
sysadmin
+6
+5
lodash-es
4.17.20 - 4.17.21
Lodash exported as ES modules.
es6
modules
stdlib
util
winston-transport
4.4.0 - 4.5.0
Outdated
Base stream implementations for winston@3 and up.
winston
transport
winston3
+2
stream-http
2.8.2 - 2.8.3
Outdated
Streaming http in the browser
http
stream
streaming
xhr
http-browserify
logform
2.3.0 - 2.3.2
Outdated
An mutable object-based log format designed for chaining & objectMode streams.
winston
logging
format
winstonjs
+3
timers-browserify
2.0.9
Outdated
timers module for browserify
timers
browserify
browser
+36
fecha
4.0.0 - 4.2.3
Date formatting and parsing
date
parse
moment
format
fecha
+1
taylorhakes
triple-beam
1.2.0 - 1.3.0
Outdated
Definitions of levels for logging purposes & shareable Symbol constants.
winstonjs
winston
logging
logform
symbols
+2
querystring-es3
0.2.1
Node's querystring module for all engines. (ES3 compat fork)
commonjs
query
querystring
spaintrain
one-time
1.0.0
Run the supplied function exactly one time (once)
once
function
single
one
one-time
+2
cheerio
0.22.0
Outdated
Tiny, fast, and elegant implementation of core jQuery designed specifically for the server
htmlparser
jquery
selector
scraper
parser
+1
@dabh/diagnostics
2.0.2 - 2.0.3
Tools for debugging your node.js modules and event loop
debug
debugger
debugging
diagnostic
diagnostics
+4
dabh
fn.name
1.0.1 - 1.1.0
Extract names from functions
fn.name
function.name
name
function
extract
+2
jwt-decode
2.2.0
Outdated
Decode JWT tokens, mostly useful for browser applications.
jwt
browser
+42
to-arraybuffer
1.0.1
Get an ArrayBuffer from a Buffer as fast as possible
buffer
to
arraybuffer
fast
read
+1
jhiesey
p-is-promise
3.0.0 - 4.0.0
Check if something is a promise
promise
is
detect
check
kind
+7
sindresorhus
lodash.kebabcase
4.0.1 - 4.1.1
The lodash method `_.kebabCase` exported as a module.
lodash-modularized
kebabcase
unfetch
4.2.0
Outdated
Bare minimum fetch polyfill in 500 bytes
fetch
polyfill
xhr
ajax
developit
vue
1.0.9 - 2.7.13
Outdated
The progressive JavaScript framework for building modern web UI.
vue
@angular/core
2.0.0 - 2.0.1
Outdated
Angular - the core framework
vue-router
3.2.0 - 3.5.4
Outdated
> - This is the repository for Vue Router 4 (for Vue 3) > - For Vue Router 3 (for Vue 2) see [vuejs/vue-router](https://github.com/vuejs/vue-router).
qrcode
0.8.0 - 0.8.2
Outdated
QRCode / 2d Barcode api with both server side and client side support using canvas
qr
code
canvas
qrcode
react-query
0.0.11 - 0.0.15
Outdated
Hooks for managing, caching and syncing asynchronous and remote data in React
cuid
2.1.5 - 2.1.8
Outdated
Collision-resistant ids optimized for horizontal scaling and performance. For node and browsers.
guid
id
uid
unique id
uuid
ericelliott
react-from-dom
0.6.0 - 0.6.2
Outdated
Convert HTML/XML source code or DOM nodes to React elements
string
DOM
converter
react
component
+1
gilbarbara
vue-no-ssr
1.1.1
Vue component to wrap non SSR friendly components
vue-client-only
2.0.0 - 2.1.0
Vue component to wrap non SSR friendly components
egoist
lottie-api
1.0.0 - 1.0.2
Outdated
A library to edit lottie-web animations dynamically
airnan
Popular search queries
webpack.js.org
url
react-scripts
react
lottie-api
react-helmet-async
+7 packages
github.com
color-convert
@headlessui/react
hoist-non-react-statics
reactstrap
lit-html
+60 packages
pinterest.com
lodash
relay-runtime
react-relay
react-use
lodash-es
+51 packages
Popular packages
react
React is a JavaScript library for building user interfaces.
+6 634 websites
core-js
Standard library
+10 238 websites
es5-ext
ECMAScript extensions and shims
+10 229 websites
@babel/runtime
babel's modular runtime helpers
+8 352 websites
lodash
Lodash modular utilities.
+4 826 websites
axios
Promise based HTTP client for the browser and node.js
+4 742 websites