www.hilton.com 151 packages

Last scanned on Sep 1 at 03:38 PM
sanitize-html 2.4.0VulnerableOutdated
Clean up user-submitted HTML, preserving allowlisted elements and allowlisted attributes on a per-element basis
License
MIT
Footprint
7 KB
Vulnerabilities
sanitize-html Information Exposure vulnerability
Affected versions >=0 <2.12.1
Sanitize-html Vulnerable To REDoS Attacks
Affected versions >=0 <2.7.1
Matched Modules
Version distribution in production
30
2.4.0
26
2.5.0
25
2.7.0
25
2.7.2
24
2.7.3
20
2.6.1
tslib 1.2.0 - 2.6.2
Runtime library for TypeScript helper functions
escape-string-regexp 4.0.0Outdated
Escape RegExp special characters
uuid 8.3.2Outdated
RFC4122 (v1, v4, and v5) UUIDs
isarray 1.0.0 - 2.0.5
Array#isArray for older browsers
react-is 18.1.0Outdated
Brand checking of React Elements.
form-data 2.1.2 - 4.0.0
A library to create readable "multipart/form-data" streams. Can be used to submit forms and file uploads to other web applications.
+2
mikeal
niftylettuce
alexindigo
postcss x.x.x
Tool for transforming styles with JS plugins
buffer 5.7.1Outdated
Node.js Buffer API, for the browser
picocolors 0.2.0 - 1.0.0
The tiniest and the fastest library for terminal output formatting with ANSI colors
entities 2.2.0Outdated
Encode & decode XML and HTML entities with ease & speed
@babel/runtime 7.18.2 - 7.18.3Outdated
babel's modular runtime helpers
+1
hzoo
existentialism
nicolo-ribaudo
get-intrinsic 1.1.3Outdated
Get and robustly cache all JS language-level intrinsics at first require time
function-bind 1.1.1Outdated
Implementation of Function.prototype.bind
lodash 4.17.21
Lodash modular utilities.
axios 1.2.2Outdated
Promise based HTTP client for the browser and node.js
cookie 0.4.1Outdated
HTTP server cookie parsing and serialization
dougwilson
dougwilson
call-bind 1.0.2Outdated
Robustly `.call.bind()` a function
object-inspect 1.12.2Outdated
string representations of objects in node and the browser
has-symbols 1.0.2 - 1.0.3
Determine if the JS environment has Symbol support. Supports spec, or shams.
ieee754 1.2.0 - 1.2.1
Read/write IEEE754 floating point numbers from/to a Buffer or array-like object
side-channel 1.0.4Outdated
Store information about any JS value in a side channel. Uses WeakMap if available.
is-plain-object 5.0.0
Returns true if an object was created by the `Object` constructor, or Object.create(null).
has-property-descriptors 1.0.0Outdated
Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD.
domutils 2.8.0Outdated
Utilities for working with htmlparser2's dom
es-abstract 1.18.7 - 1.20.4Outdated
ECMAScript spec abstract operations.
base64-js 1.5.1
Base64 encoding/decoding in pure JS
define-properties 1.1.4Outdated
Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.
dom-serializer 1.3.2 - 1.4.1Outdated
render domhandler DOM nodes to a string
is-callable 1.2.7
Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.
nanoid 3.3.0 - 3.3.4Outdated
A tiny (116 bytes), secure URL-friendly unique string ID generator
domhandler 4.3.1Outdated
Handler for htmlparser2 that turns pages into a dom
has-tostringtag 1.0.0Outdated
Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.
events 3.3.0
Node's event emitter for all engines.
which-typed-array 1.1.6 - 1.1.9Outdated
Which kind of Typed Array is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.
object-keys 1.1.1
An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim
regexp.prototype.flags 1.4.3Outdated
ES6 spec-compliant RegExp.prototype.flags shim.
deepmerge 4.2.2Outdated
A library for deep (recursive) merging of Javascript objects
domelementtype 2.2.0 - 2.3.0
all the types of nodes in htmlparser2's dom
is-typed-array 1.1.7 - 1.1.10Outdated
Is this value a JS Typed Array? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag.
is-regex 1.1.4
Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag
available-typed-arrays 1.0.5Outdated
Returns an array of Typed Array names that are available in the current environment
is-date-object 1.0.5
Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
is-symbol 1.0.2 - 1.0.4
Determine if a value is an ES6 Symbol or not.
is-shared-array-buffer 1.0.0 - 1.0.2Outdated
Is this value a JS SharedArrayBuffer?
is-string 1.0.7
Is this value a JS String object or primitive? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
eventemitter3 3.0.0 - 4.0.7Outdated
EventEmitter3 focuses on performance while maintaining a Node.js AND browser compatible interface.
has-bigints 1.0.2
Determine if the JS environment has BigInt support.
content-type 1.0.4Outdated
Create and parse HTTP Content-Type header
for-each 0.3.3
A better forEach
ljharb
raynos
is-number-object 1.0.6 - 1.0.7
Is this value a JS Number object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
is-boolean-object 1.1.2
Is this value a JS Boolean? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
htmlparser2 6.1.0Outdated
Fast & forgiving HTML/XML parser
is-bigint 1.0.3 - 1.0.4
Is this value an ES BigInt?
functions-have-names 1.2.3
Does this JS environment support the `name` property on functions?
which-boxed-primitive 1.0.0 - 1.0.2
Which kind of boxed JS primitive is this?
scheduler 0.21.0 - 0.22.0Outdated
Cooperative scheduler for the browser environment.
has 1.0.2 - 1.0.3Outdated
Object.prototype.hasOwnProperty.call shortcut
tarruda
tarruda
emittery 0.7.1 - 0.7.2Outdated
Simple and modern async event emitter
prop-types 15.8.0 - 15.8.1
Runtime type checking for React props and similar objects.
is-arguments 1.1.1
Is this an arguments object? It's a harder question than you think.
react 18.0.0 - 18.1.0Outdated
React is a JavaScript library for building user interfaces.
process 0.11.10
process information for node.js and browsers
react-dom 18.0.0 - 18.1.0Outdated
React package for working with the DOM.
deep-equal 2.2.0Outdated
node's assert.deepEqual algorithm
date-fns 2.29.3Outdated
Modern JavaScript date utility library
kossnocorp
kossnocorp
object-is 1.1.4 - 1.1.5Outdated
ES2015-compliant shim for Object.is - differentiates between -0 and +0
is-set 2.0.1 - 2.0.2Outdated
Is this value a JS Set? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
is-map 2.0.1 - 2.0.2Outdated
Is this value a JS Map? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
hoist-non-react-statics 3.3.2
Copies non-react specific statics from a child component to a parent component
mridgway
mridgway
querystring 0.2.1
Node's querystring module for all engines.
cross-fetch 3.1.0 - 3.1.4Outdated
Universal WHATWG Fetch API for Node, Browsers and React Native
classnames 2.3.0 - 2.3.1Outdated
A simple utility for conditionally joining classNames together
graphql 15.5.1 - 15.6.1Outdated
A Query Language and Runtime which can target any service.
es-get-iterator 1.1.1 - 1.1.2Outdated
Get an iterator for any JS language value. Works robustly across all environments, all versions.
klona 2.0.5Outdated
A tiny (240B to 501B) and fast utility to "deep clone" Objects, Arrays, Dates, RegExps, and more!
reflect-metadata 0.1.13Outdated
Polyfill for Metadata Reflection API
lodash-es 4.17.21
Lodash exported as ES modules.
use-sync-external-store 1.0.0 - 1.2.0Outdated
Backwards compatible shim for React's useSyncExternalStore. Works with any React that supports hooks.
acdlite
gnoff
react-bot
fbjs 0.8.16 - 0.8.18Outdated
A collection of utility libraries used by other Facebook JS projects
+5
zpao
eliwhite
yungsters
@xmldom/xmldom 0.7.0 - 0.7.2Outdated
A pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.
next x.x.x
The React Framework
rauchg
timneutkens
vercel-release-bot
graphql-tag 2.12.2 - 2.12.5Outdated
A JavaScript template literal tag that parses GraphQL queries
jnwng
abernix
apollo-bot
debounce 1.2.0 - 1.2.1Outdated
Delay function calls until a set time elapses after the last invocation
react-remove-scroll 2.5.0 - 2.5.3Outdated
Disables scroll outside of `children` node.
kashey
kashey
resize-observer-polyfill 1.5.1
A polyfill for the Resize Observer API
use-callback-ref 1.3.0Outdated
The same useRef, but with callback
use-sidecar 1.1.1 - 1.1.2
Sidecar code splitting utils
react-remove-scroll-bar 2.3.0 - 2.3.1Outdated
Removes body scroll without content _shake_
kashey
kashey
i18next 21.10.0 - 22.0.7Outdated
i18next internationalization framework
react-style-singleton 2.2.0 - 2.2.1
Just create a single stylesheet...
get-nonce 1.0.0 - 1.0.1
returns nonce
react-hook-form 7.29.0 - 7.45.4Outdated
Performant, flexible and extensible forms library for React Hooks
markdown-to-jsx 7.1.4 - 7.1.5Outdated
Convert markdown to JSX with ease for React and React-like projects. Super lightweight and highly configurable.
react-error-boundary 4.0.10 - 4.0.11Outdated
Simple reusable React error boundary component
kentcdodds
brianvaughn
tabbable 4.0.0Outdated
Returns an array of all tabbable DOM nodes within a containing node.
davidtheclark
stefcameron
react-i18next 11.18.5 - 12.1.5Outdated
Internationalization for react done right. Using the i18next i18n ecosystem.
date-fns-tz 1.0.10Outdated
Time zone support for date-fns v3 with the Intl API
@turf/helpers 6.0.0 - 6.0.1Outdated
turf helpers module
focus-lock 0.11.0 - 0.11.2Outdated
DOM trap for a focus
react-focus-lock 2.9.0 - 2.9.1Outdated
It is a trap! (for a focus)
react-clientside-effect 1.2.5 - 1.2.6
Create components whose prop changes map to a global side effect
@turf/invariant 6.2.0 - 6.5.0
turf invariant module
parse-srcset 1.0.0 - 1.0.2
A spec-conformant JavaScript parser for the HTML5 srcset attribute
albell
albell
react-intersection-observer 9.5.0 - 9.5.2Outdated
Monitor if a component is inside the viewport, using IntersectionObserver API
lit-element 3.0.0Outdated
A simple base class for creating fast, lightweight web components
+11
aomarks
emarquez
sorvell
xstate 4.7.0 - 4.38.2Outdated
Finite State Machines and Statecharts for the Modern Web.
antd 4.5.0 - 4.7.2Outdated
An enterprise-class UI design language and React components implementation
universal-cookie 4.0.4Outdated
Universal cookies for JavaScript
react-query 4.0.0Outdated
Hooks for managing, caching and syncing asynchronous and remote data in React
tannerlinsley
tkdodo
redux-saga 0.15.4 - 0.16.2Outdated
Saga middleware for Redux to handle Side Effects
i18next-http-backend 1.2.3 - 1.2.8Outdated
i18next-http-backend is a backend layer for i18next using in Node.js, in the browser and for Deno.
@reach/utils 0.16.0Outdated
Internal, shared utilities for Reach UI.
+1
ryanflorence
mjackson
chancestrickland
inversify 5.1.1Outdated
A powerful and lightweight inversion of control container for JavaScript and Node.js apps powered by TypeScript.
@chakra-ui/utils 1.0.0 - 2.0.15
Common utilities and types for Chakra UI
segunadebayo
_codebender828
@reach/portal 0.16.2Outdated
Declarative portals for React
+1
ryanflorence
mjackson
chancestrickland
credit-card-type 9.1.0Outdated
A library for determining credit card type
braintree
braintree
@reach/observe-rect 1.2.0
Observe the Rect of a DOM element.
+1
blainekasten
chancestrickland
mjackson
bezier-easing 2.1.0
BezierEasing provides Cubic Bezier Curve easing which generalizes easing functions exactly like in CSS Transitions.
@reach/auto-id 0.16.0Outdated
Autogenerate IDs to facilitate WAI-ARIA and server rendering.
+1
ryanflorence
mjackson
chancestrickland
next-i18next 12.0.0 - 13.0.2Outdated
The easiest way to translate your NextJs apps.
@reach/rect 0.16.0 - 0.17.0Outdated
Measure React elements position in the DOM
+1
ryanflorence
mjackson
chancestrickland
@reach/descendants 0.16.1Outdated
A descendant index solution for better accessibility support in compound components
+1
ryanflorence
mjackson
chancestrickland
@reach/dialog 0.16.0 - 0.17.0Outdated
Accessible React Modal Dialog.
+1
ryanflorence
mjackson
chancestrickland
@reach/popover 0.15.2 - 0.16.2Outdated
Render a portal positioned relative to another element.
+1
ryanflorence
mjackson
chancestrickland
@reach/combobox 0.16.5Outdated
Accessible React Combobox (Autocomplete).
+1
ryanflorence
mjackson
chancestrickland
tesseract.js 2.0.0 - 4.1.2Outdated
Pure Javascript Multilingual OCR
+1
antimatter15
jeromewu
bijection
react-scroll-parallax 3.0.0 - 3.4.2Outdated
React hooks and components to create parallax scroll effects for banners, images or any other DOM elements.
@swc/helpers x.x.x
@dx-shared/rule-engine x.x.x
@turf/distance x.x.x
@turf/boolean-point-in-polygon x.x.x
matcher x.x.x
@tanstack/query-core x.x.x
@tanstack/react-query x.x.x
@tanstack/react-query-devtools x.x.x
@bloomreach/react-sdk x.x.x
@bloomreach/spa-sdk x.x.x
@reach/dropdown x.x.x
@reach/menu-button x.x.x
card-validator x.x.x
gopd x.x.x
is-array-buffer x.x.x
is-weakmap x.x.x
is-weakset x.x.x
parallax-controller x.x.x
@tanem/svg-injector x.x.x
react-svg x.x.x
ts-keycode-enum x.x.x
which-collection x.x.x
object-inspect|. x.x.x