Is lodash.set safe to use?

lodash.set has 1 known vulnerabilities on the latest version (4.3.2). DepScope rates its health at 65/100 (moderate risk).

What is the latest version of lodash.set?

The latest version of lodash.set is 4.3.2, released 2016-08-13.

Does lodash.set have known vulnerabilities?

Yes. lodash.set has 1 known vulnerabilities. See depscope.dev/pkg/npm/lodash.set for details.

Is lodash.set deprecated?

No, lodash.set is actively maintained. Latest release: 4.3.2 (2016-08-13).

What are alternatives to lodash.set?

Popular alternatives to lodash.set in npm include: semver, debug, minimatch, strip-ansi, ms.

What license does lodash.set use?

lodash.set is licensed under MIT.

lodash.set

npmv4.3.2

The lodash method `_.set` exported as a module.

License MITpermissive12 versions2 maintainers0 deps1,883,218 weekly dl

lodash/lodash

/ 100

Health

update required

[email protected] has vulnerabilities — update to latest

Update to >= 4.17.19 to fix known vulnerabilities

1 high severity vulnerabilities

Health breakdown0 – 100

0/25

maintenance

17/20

popularity

20/25

security

15/15

maturity

13/15

community

Vulnerabilities

1 high

Advisories (1)

Severity	ID	Summary	Fixed in
high	CVE-2020-8203	Prototype Pollution in lodash	4.17.19

Bundle & TypeScript

📦

Bundle Size

4.8 KBminified

1.9 KB gzipped

0 direct dependencies

side effects

🌟

TypeScript

7/10typed

Types from @types/lodash.set (DefinitelyTyped)

Quality signals

Publish security

npm signed

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/lodash.set