Is lodash safe to use?

lodash has no known vulnerabilities on the latest version (4.18.1). DepScope rates its health at 97/100 (low risk).

What is the latest version of lodash?

The latest version of lodash is 4.18.1, released 2026-04-01.

Does lodash have known vulnerabilities?

No known vulnerabilities on the latest version of lodash.

Is lodash deprecated?

No, lodash is actively maintained. Latest release: 4.18.1 (2026-04-01).

What are alternatives to lodash?

Popular alternatives to lodash in npm include: semver, debug, ansi-styles, brace-expansion, strip-ansi.

lodash

npmv4.18.1

Lodash modular utilities.

License MITpermissive117 versions1 maintainers0 deps148,063,134 weekly dl

lodash/lodash

/ 100

Health

safe to use

[email protected] is safe to use (health: 97/100)

Health breakdown0 – 100

25/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

12/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

68.5 KBminified

24.7 KB gzipped

0 direct dependencies

side effects

🌟

TypeScript

7/10typed

Types from @types/lodash (DefinitelyTyped)

OSS Scorecard

OpenSSF security posture score

7.1/10

moderate

Maintainer trust

Active maintainers (3m)

4

Contributors (12m)

7

Primary author dominance

55%

GitHub stars

61,303

Quality signals

OSS Criticality

0.78critical

Download trend

stable(+1.8%)

Publish security

npm signed

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/lodash