Is lodash.update safe to use?

lodash.update has 1 known vulnerabilities on the latest version (4.10.2). DepScope rates its health at 74/100 (moderate risk).

What is the latest version of lodash.update?

The latest version of lodash.update is 4.10.2, released 2016-08-13.

Does lodash.update have known vulnerabilities?

Yes. lodash.update has 1 known vulnerabilities. See depscope.dev/pkg/npm/lodash.update for details.

Is lodash.update deprecated?

No, lodash.update is actively maintained. Latest release: 4.10.2 (2016-08-13).

What are alternatives to lodash.update?

Popular alternatives to lodash.update in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does lodash.update use?

lodash.update is licensed under MIT.

lodash.update

npmv4.10.2

The lodash method `_.update` exported as a module.

License MITpermissive7 versions2 maintainers0 deps9,082 weekly dl

lodash/lodash

/ 100

Health

update required

[email protected] has vulnerabilities — update to latest

Update to >= 4.17.19 to fix known vulnerabilities

1 high severity vulnerabilities

Health breakdown0 – 100

20/25

maintenance

6/20

popularity

20/25

security

15/15

maturity

13/15

community

Vulnerabilities

1 high

Advisories (1)

Severity	ID	Summary	Fixed in
high	CVE-2020-8203	Prototype Pollution in lodash	4.17.19

Bundle & TypeScript

📦

Bundle Size

5.0 KBminified

2.0 KB gzipped

0 direct dependencies

side effects

🌟

TypeScript

7/10typed

Types from @types/lodash.update (DefinitelyTyped)

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/lodash.update

lodash.update

npmv4.10.2

The lodash method `_.update` exported as a module.

License MITpermissive7 versions2 maintainers0 deps9,082 weekly dl

lodash/lodash

/ 100

Health

update required

[email protected] has vulnerabilities — update to latest

Update to >= 4.17.19 to fix known vulnerabilities

1 high severity vulnerabilities

Health breakdown0 – 100

20/25

maintenance

6/20

popularity

20/25

security

15/15

maturity

13/15

community

Vulnerabilities

1 high

Advisories (1)

Severity	ID	Summary	Fixed in
high	CVE-2020-8203	Prototype Pollution in lodash	4.17.19

Bundle & TypeScript

📦

Bundle Size

5.0 KBminified

2.0 KB gzipped

0 direct dependencies

side effects

🌟

TypeScript

7/10typed

Types from @types/lodash.update (DefinitelyTyped)

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/lodash.update