About
Community
voxels.com
128 packages
Last scanned on Jan 19 at 01:10 PM
Update
Name
Size
Popularity
Severity
lodash
4.17.16
Vulnerable
Outdated
Lodash modular utilities.
Script
https://voxels.com/33476-web.js
License
MIT
Footprint
9 KB
Vulnerabilities
High
GHSA-35jh-r3h4-6jhm
Command Injection in lodash
Affected versions >=0 <4.17.21
Moderate
GHSA-29mw-wpgm-hmr9
Regular Expression Denial of Service (ReDoS) in lodash
Affected versions >=0 <4.17.21
High
GHSA-p6mc-m468-83gw
Prototype Pollution in lodash
Affected versions >=3.7.0 <4.17.19
Matched Modules
Version distribution in production
3 846
4.17.16
946
4.17.21
337
4.17.20
322
4.17.15
302
4.17.19
301
4.17.13
Also used on 4830 websites
skype.com
20 packages
sentry.io
157 packages
pinterest.com
56 packages
pinimg.com
52 packages
Repository
Homepage
More
modules
stdlib
util
jsonwebtoken
8.2.0 - 8.2.2
Vulnerable
Outdated
JSON Web Token implementation (symmetric and asymmetric)
jwt
es5-ext
0.10.52 - 0.10.62
Vulnerable
Outdated
ECMAScript extensions and shims
ecmascript
ecmascript5
ecmascript6
es5
es6
+11
medikoo
semver
7.3.7
Outdated
The semantic version parser used by npm.
+2
tslib
1.2.0 - 2.4.1
Outdated
Runtime library for TypeScript helper functions
TypeScript
Microsoft
compiler
language
javascript
+2
+5
ms
2.1.2 - 2.1.3
Tiny millisecond conversion utility
+5
lru-cache
5.1.1 - 6.0.0
Outdated
A cache object that deletes the least-recently-used items.
mru
lru
cache
isaacs
yallist
3.0.3 - 4.0.0
Outdated
Yet Another Linked List
isaacs
readable-stream
3.6.0
Outdated
Node.js Streams, a user-land copy of the stream library from Node.js
readable
stream
pipe
uuid
7.0.0 - 8.0.0
Outdated
RFC4122 (v1, v4, and v5) UUIDs
uuid
guid
rfc4122
string_decoder
1.1.0 - 1.3.0
The string_decoder module from Node core
string
decoder
browser
browserify
+1
isarray
1.0.0 - 2.0.5
Array#isArray for older browsers
browser
isarray
array
juliangruber
inherits
2.0.4
Browser-friendly inheritance fully compatible with standard node.js inherits()
inheritance
class
klass
oop
object-oriented
+3
isaacs
is-stream
1.0.0 - 3.0.0
Outdated
Check if something is a Node.js stream
stream
type
streams
writable
readable
+5
sindresorhus
pify
3.0.0 - 5.0.0
Outdated
Promisify a callback-style function
promisify
callback
promise
promises
denodify
+13
sindresorhus
buffer
5.1.0 - 6.0.3
Node.js Buffer API, for the browser
arraybuffer
browser
browserify
buffer
compatible
+2
feross
@babel/runtime
7.12.13 - 7.20.7
Outdated
babel's modular runtime helpers
+1
get-intrinsic
1.1.3
Outdated
Get and robustly cache all JS language-level intrinsics at first require time
javascript
ecmascript
es
js
intrinsic
+2
ljharb
function-bind
1.1.0 - 1.1.1
Outdated
Implementation of Function.prototype.bind
function
bind
shim
es5
once
1.3.1 - 1.4.0
Run a function exactly one time
once
function
one
single
isaacs
wrappy
0.0.0 - 1.0.2
Callback wrapping utility
isaacs
call-bind
1.0.2
Outdated
Robustly `.call.bind()` a function
javascript
ecmascript
es
js
callbind
+8
ljharb
fast-deep-equal
3.0.0 - 3.1.3
Fast deep equal
fast
equal
deep-equal
esp
core-util-is
1.0.2 - 1.0.3
The `util.is*` functions introduced in Node v0.12.
util
isBuffer
isArray
isNumber
isString
+4
isaacs
has-symbols
1.0.2 - 1.0.3
Determine if the JS environment has Symbol support. Supports spec, or shams.
Symbol
symbols
typeof
sham
polyfill
+3
ljharb
rxjs
6.6.2 - 6.6.7
Outdated
Reactive Extensions for modern JavaScript
Rx
RxJS
ReactiveX
ReactiveExtensions
Streams
+5
has-property-descriptors
1.0.0
Outdated
Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD.
property
descriptors
has
environment
env
+2
ljharb
es-abstract
1.18.7 - 1.20.4
Outdated
ECMAScript spec abstract operations.
ECMAScript
ES
abstract
operation
abstract operation
+4
ljharb
base64-js
1.3.0 - 1.5.1
Base64 encoding/decoding in pure JS
base64
define-properties
1.1.3 - 1.1.4
Outdated
Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.
Object.defineProperty
Object.defineProperties
object
property descriptor
descriptor
+2
ljharb
is-callable
1.2.7
Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.
Function
function
callable
generator
generator function
+5
ljharb
has-tostringtag
1.0.0
Outdated
Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.
javascript
ecmascript
symbol
symbols
tostringtag
+1
ljharb
events
3.0.0 - 3.3.0
Node's event emitter for all engines.
events
eventEmitter
eventDispatcher
listeners
is-buffer
1.1.4 - 1.1.6
Outdated
Determine if an object is a Buffer
arraybuffer
browser
browser buffer
browserify
buffer
+10
feross
which-typed-array
1.1.6 - 1.1.9
Outdated
Which kind of Typed Array is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.
array
TypedArray
typed array
which
typed
+13
ljharb
object-keys
1.1.0 - 1.1.1
An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim
Object.keys
keys
ES5
shim
ljharb
is-typed-array
1.1.7 - 1.1.10
Outdated
Is this value a JS Typed Array? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag.
array
TypedArray
typed array
is
typed
+13
end-of-stream
1.1.0 - 1.4.4
Call a callback when a readable/writable/duplex stream has completed or failed.
stream
streams
callback
finish
close
+2
mafintosh
available-typed-arrays
1.0.5
Outdated
Returns an array of Typed Array names that are available in the current environment
typed
arrays
Float32Array
Float64Array
Int8Array
+8
ljharb
util
0.12.0 - 0.12.5
Node.js's util module for all engines
util
+3
eventemitter3
2.0.0 - 5.0.0
Outdated
EventEmitter3 focuses on performance while maintaining a Node.js AND browser compatible interface.
EventEmitter
EventEmitter2
EventEmitter3
Events
addEventListener
+10
for-each
0.3.3
A better forEach
pako
1.0.6 - 1.0.11
Outdated
zlib port to javascript - fast, modularized, with browser support
zlib
deflate
inflate
gzip
vitaly
is-typedarray
1.0.0
Detect whether or not an object is a Typed Array
typed
array
detect
is
util
hughsk
has
1.0.1 - 1.0.3
Outdated
Object.prototype.hasOwnProperty.call shortcut
tarruda
is-arguments
1.1.1
Is this an arguments object? It's a harder question than you think.
arguments
js
javascript
is-arguments
is
+1
ljharb
@webassemblyjs/wasm-parser
1.0.0 - 1.5.9
Outdated
WebAssembly binary format parser
webassembly
javascript
ast
parser
wasm
xtuc
jws
3.2.1 - 4.0.0
Implementation of JSON Web Signatures
jws
json
web
signatures
+4
jwa
1.4.1 - 2.0.0
JWA implementation (supports all JWS algorithms)
jwa
jws
jwt
rsa
ecdsa
+1
+4
is-generator-function
1.0.9
Outdated
Determine if a function is a native generator function.
generator
generator function
es6
es2015
yield
+2
ljharb
url
0.11.0
Outdated
The core `url` packaged standalone for use with Browserify.
parsing
url
analyze
lodash.isplainobject
4.0.6
The lodash method `_.isPlainObject` exported as a module.
lodash-modularized
isplainobject
clsx
1.2.0 - 1.2.1
Outdated
A tiny (239B) utility for constructing className strings conditionally.
classes
classname
classnames
lukeed
minimalistic-assert
1.0.0 - 1.0.1
minimalistic-assert ===
object-is
1.1.0 - 1.1.5
Outdated
ES2015-compliant shim for Object.is - differentiates between -0 and +0
is
Object.is
equality
sameValueZero
ES6
+4
ljharb
querystring
0.2.0
Outdated
Node's querystring module for all engines.
commonjs
query
querystring
typedarray-to-buffer
3.1.3 - 3.1.5
Outdated
Convert a typed array to a Buffer without a copy
buffer
typed array
convert
no copy
uint8array
+9
feross
ecdsa-sig-formatter
1.0.10 - 1.0.11
Translate ECDSA signatures between ASN.1/DER and JOSE-style concatenation
ecdsa
der
asn.1
jwt
jwa
+2
d2l-travis-deploy
buffer-equal-constant-time
1.0.0 - 1.0.1
Constant-time comparison of Buffers
buffer
equal
constant-time
crypto
lodash.isstring
4.0.1
The lodash method `_.isString` exported as a module.
lodash-modularized
isstring
assert
2.0.0
Outdated
The assert module from Node.js, for the browser.
assert
browser
+3
fast-safe-stringify
2.1.1
Safely and quickly serialize JavaScript objects
stable
stringify
JSON
JSON.stringify
safe
+1
query-string
6.5.0 - 7.1.3
Outdated
Parse and stringify URL query strings
browser
querystring
query
string
qs
+9
sindresorhus
sha.js
2.4.9 - 2.4.11
Streamable SHA hashes in pure javascript
ramda
0.23.0 - 0.28.0
Outdated
A practical functional library for JavaScript programmers.
ramda
functional
utils
utilities
toolkit
+6
+5
browserify-zlib
0.2.0
Full zlib module for the browser
zlib
browserify
underscore
1.11.0 - 1.13.6
JavaScript's functional programming helper library.
util
functional
server
client
browser
lodash.isboolean
3.0.1 - 3.0.3
The lodash method `_.isBoolean` exported as a module.
lodash-modularized
isboolean
lodash.sortby
4.7.0
The lodash method `_.sortBy` exported as a module.
lodash-modularized
sortby
hash-base
3.0.4 - 3.1.0
abstract base class for hash-streams
hash
stream
+1
asn1.js
5.2.0 - 5.4.1
ASN.1 encoder and decoder
asn.1
der
elliptic
6.5.4
Outdated
EC cryptography
EC
Elliptic
curve
Cryptography
indutny
lodash.isnumber
3.0.1 - 3.0.3
The lodash method `_.isNumber` exported as a module.
lodash-modularized
isnumber
hash.js
1.1.2 - 1.1.7
Various hash functions that could be run by both browser and node
hash
sha256
sha224
hmac
indutny
@sentry/core
6.19.3 - 6.19.7
Outdated
Base implementation for all Sentry JavaScript SDKs
+8
aws-sdk
2.239.1 - 2.895.0
Outdated
AWS SDK for JavaScript
api
amazon
aws
ec2
simpledb
+30
+2
lodash-es
4.17.21
Lodash exported as ES modules.
es6
modules
stdlib
util
hmac-drbg
1.0.1
Deterministic random bit generator (hmac)
hmac
drbg
prng
indutny
des.js
1.0.1
Outdated
DES implementation
DES
3DES
EDE
CBC
indutny
marked
4.0.0 - 4.0.19
Outdated
A markdown parser built for speed
markdown
markup
html
+1
md5.js
1.1.0 - 1.3.5
node style md5 on pure JavaScript
crypto
md5
+2
pbkdf2
3.1.0 - 3.1.2
This library provides the functionality of PBKDF2 with the ability to use any supported hashing algorithm returned from crypto.getHashes()
pbkdf2
kdf
salt
hash
+3
cipher-base
1.0.4
abstract base class for crypto-streams
cipher
stream
parse-asn1
5.1.6
Outdated
utility library for parsing asn1 files for use with browserify-sign.
+2
browserify-sign
2.4.0 - 2.8.0
Outdated
adds node crypto signing for browsers
+2
browserify-aes
0.4.0 - 0.8.1
Outdated
aes, for browserify
aes
crypto
browserify
+2
stream-http
2.8.2 - 2.8.3
Outdated
Streaming http in the browser
http
stream
streaming
xhr
http-browserify
tailwindcss
2.1.0 - 2.1.4
Outdated
A utility-first CSS framework for rapidly building custom user interfaces.
evp_bytestokey
1.0.3
The insecure key derivation algorithm from OpenSSL
crypto
openssl
browserify-rsa
4.1.0
RSA for browserify
+2
crypto-browserify
1.0.9 - 2.0.0
Outdated
implementation of crypto for the browser
+2
create-ecdh
3.0.0 - 4.0.4
createECDH but browserifiable
diffie
hellman
diffiehellman
ECDH
+2
public-encrypt
4.0.3
browserify version of publicEncrypt & privateDecrypt
+2
diffie-hellman
1.1.2
Outdated
pure js diffie-hellman
diffie
hellman
diffiehellman
dh
+2
browserify-des
1.0.2
browserify-des ===
miller-rabin
1.1.0 - 4.0.1
Miller Rabin algorithm for primality test
prime
miller-rabin
bignumber
randomfill
1.0.0 - 1.0.4
random fill from browserify stand alone
crypto
random
cookiejar
2.0.2 - 2.1.4
simple persistent cookiejar system
json-stable-stringify
1.0.0 - 1.0.2
Outdated
deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results
json
stringify
deterministic
hash
sort
+1
ljharb
jsonify
0.0.0
Outdated
JSON without touching any globals
json
browser
ljharb
charenc
0.0.0 - 0.0.2
character encoding utilities
pvorb
split-on-first
1.0.0 - 1.1.0
Outdated
Split a string on the first occurance of a given separator
split
string
first
once
occurrence
+3
sindresorhus
to-arraybuffer
1.0.1
Get an ArrayBuffer from a Buffer as fast as possible
buffer
to
arraybuffer
fast
read
+1
jhiesey
is-nan
1.3.1 - 1.3.2
ES2015-compliant shim for Number.isNaN - the global isNaN returns false positives.
is
NaN
not a number
number
isNaN
+5
ljharb
p-is-promise
3.0.0 - 4.0.0
Check if something is a promise
promise
is
detect
check
kind
+7
sindresorhus
copy-to-clipboard
3.3.0 - 3.3.1
Outdated
Copy stuff into clipboard using JS with fallbacks
clipboard
copy
browser
sudodoki
toggle-selection
1.0.5 - 1.0.6
Toggle current selected content in browser
selection
toggle
browser
deselect
sudodoki
uniq
0.0.2 - 1.0.1
Removes duplicates from a sorted array in place
array
duplicate
unique
uniq
remove
+5
mikolalysenko
d3-selection
0.3.0 - 3.0.0
Data-driven DOM manipulation: select elements and join them to data.
d3
d3-module
dom
selection
data-join
@firebase/util
0.3.2 - 1.8.0
Outdated
_NOTE: This is specifically tailored for Firebase JS SDK usage, if you are not a member of the Firebase team, please avoid using this package_
+1
preact
10.4.8 - 10.11.3
Outdated
Fast 3kb React-compatible Virtual DOM library.
preact
react
ui
user interface
virtual dom
+5
+6
lodash.isobject
2.0.0 - 2.4.1
Outdated
The modern build of lodash’s `_.isObject` as a module.
lodash
lodash-modularized
stdlib
util
lodash.keys
2.3.0 - 2.4.1
Outdated
The lodash method `_.keys` exported as a module.
lodash-modularized
keys
@hookform/resolvers
1.0.0
Outdated
React Hook Form validation resolvers: Yup, Joi, Superstruct, Zod, Vest, Class Validator, io-ts, Nope, computed-types, TypeBox, arktype and Typanion
scheme
validation
scheme-validation
hookform
react-hook-form
+14
es6-object-assign
1.0.0 - 1.1.0
ECMAScript 2015 (ES6) Object.assign polyfill and ponyfill
Object
assign
ES6
ECMAScript 6
ES2015
+3
rubennorte
fp-ts
2.10.0 - 2.10.5
Outdated
Functional programming in TypeScript
typescript
algebraic-data-types
functional-programming
gcanti
dijkstrajs
1.0.1 - 1.0.2
Outdated
A simple JavaScript implementation of Dijkstra's single-source shortest-paths algorithm.
dijkstra
shortest
path
search
graph
tcort
qrcode
1.4.3 - 1.4.4
Outdated
QRCode / 2d Barcode api with both server side and client side support using canvas
qr
code
canvas
qrcode
react-bootstrap
0.30.2 - 0.33.1
Outdated
Bootstrap 5 components built with React
bootstrap
react
component
components
ecosystem-react
+1
material-colors
1.2.2 - 1.2.6
Colors of Google's Material Design made available to coders
colors
palette
design
css
sass
+4
shuhei
io-ts
0.0.1 - 2.2.20
Outdated
TypeScript runtime type system for IO decoding/encoding
typescript
runtime
decoder
encoder
schema
gcanti
@ethersproject/bytes
5.0.0 - 5.7.0
Bytes utility functions for ethers.
Ethereum
ethers
ricmoo
@auth0/auth0-spa-js
2.0.0 - 2.0.2
Outdated
Auth0 SDK for Single Page Applications using Authorization Code Grant Flow with PKCE
auth0
login
Authorization Code Grant Flow
PKCE
Single Page Application authentication
+1
+41
react-native-web
0.11.0 - 0.11.1
Outdated
React Native for Web
react
react-component
react-native
web
necolas
react-final-form
6.5.4
Outdated
🏁 High performance subscription-based form state management for React
erikras
timeago.js
4.0.0 - 4.0.2
timeago.js is a simple library (only 1kb) to used to format datetime with `*** time ago` statement. eg: '3 hours ago'. localization supported.
timeago
datetime
*** time ago
date
javascript timeago
amplitude-js
5.2.0
Outdated
Javascript library for Amplitude Analytics
analytics
amplitude
+5
lottie-api
1.0.0 - 1.0.2
Outdated
A library to edit lottie-web animations dynamically
airnan
Popular search queries
webpack.js.org
url
react-scripts
react
lottie-api
react-helmet-async
+7 packages
github.com
color-convert
@headlessui/react
hoist-non-react-statics
reactstrap
lit-html
+60 packages
pinterest.com
lodash
relay-runtime
react-relay
react-use
lodash-es
+51 packages
Popular packages
react
React is a JavaScript library for building user interfaces.
+6 634 websites
core-js
Standard library
+10 238 websites
es5-ext
ECMAScript extensions and shims
+10 229 websites
@babel/runtime
babel's modular runtime helpers
+8 352 websites
lodash
Lodash modular utilities.
+4 826 websites
axios
Promise based HTTP client for the browser and node.js
+4 742 websites