Is lodash.pick safe to use?

lodash.pick has 1 known vulnerabilities on the latest version (4.4.0). DepScope rates its health at 35/100 (critical risk).

What is the latest version of lodash.pick?

The latest version of lodash.pick is 4.4.0, released 2016-08-13.

Does lodash.pick have known vulnerabilities?

Yes. lodash.pick has 1 known vulnerabilities. See depscope.dev/pkg/npm/lodash.pick for details.

Is lodash.pick deprecated?

Yes, lodash.pick is deprecated: This package is deprecated. Use destructuring assignment syntax instead. Consider using semver instead.

What are alternatives to lodash.pick?

Popular alternatives to lodash.pick in npm include: semver, ansi-styles, minimatch, debug, brace-expansion.

What license does lodash.pick use?

lodash.pick is licensed under MIT.

lodash.pick

npmv4.4.0deprecated

The lodash method `_.pick` exported as a module.

License MITpermissive17 versions2 maintainers0 deps2,150,025 weekly dl

lodash/lodash

/ 100

Health

find alternative

lodash.pick is deprecated — find an alternative

Update to >= 4.17.19 to fix known vulnerabilities

Low health score (35/100)
1 high severity vulnerabilities
Package is deprecated

Health breakdown0 – 100

0/25

maintenance

17/20

popularity

20/25

security

15/15

maturity

13/15

community

Vulnerabilities

1 high

Advisories (1)

Severity	ID	Summary	Fixed in
high	CVE-2020-8203	Prototype Pollution in lodash	4.17.19

Bundle & TypeScript

📦

Bundle Size

1.8 KBminified

0.9 KB gzipped

0 direct dependencies

side effects

🌟

TypeScript

7/10typed

Types from @types/lodash.pick (DefinitelyTyped)

Quality signals

Publish security

npm signed

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/lodash.pick