Is lodash safe to use?

lodash has no known vulnerabilities on the latest version (4.18.1). DepScope rates its health at 97/100 (low risk).

What is the latest version of lodash?

The latest version of lodash is 4.18.1, released 2026-04-01.

Does lodash have known vulnerabilities?

No known vulnerabilities on the latest version of lodash.

Is lodash deprecated?

No, lodash is actively maintained. Latest release: 4.18.1 (2026-04-01).

What are alternatives to lodash?

Popular alternatives to lodash in npm include: ?, semver, debug, ansi-styles, minimatch.

lodash

npmv4.18.1

Lodash modular utilities.

License MITpermissive117 versions1 maintainers0 deps128,527,290 weekly dl

lodash/lodash

/ 100

Health

safe to use

[email protected] is safe to use (health: 97/100)

Health breakdown0 – 100

25/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

12/15

community

0/15

popularity_floor

Vulnerabilities

Bundle & TypeScript

📦

Bundle Size

68.5 KBminified

24.7 KB gzipped

0 direct dependencies

side effects

🌟

TypeScript

7/10typed

Types from @types/lodash (DefinitelyTyped)

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/lodash