lodash npm package: security scan & malware check

Q: Is lodash safe to use?

No confirmed malware was found in lodash@4.18.1, but the review flagged 1 medium, 1 low severity findings for risky patterns worth checking before you rely on it.

Q: Does lodash contain malware?

No malware was identified in lodash@4.18.1 when Togoder Security scanned it on Oct 4, 2026. A new version can still introduce malicious code, so scan the exact versions in your lockfile.

Q: How was lodash checked?

Togoder Security downloaded the published npm package and had an AI model read its 1044 source files, looking for install scripts, credential access, network exfiltration, obfuscation, backdoors and crypto-wallet theft. The results are cached by file hash and shown here.

Q: How do I scan lodash together with the rest of my dependencies?

Upload your lockfile at https://security.togoder.click/scan or call the API documented at https://security.togoder.click/api-docs. Files that have already been scanned, like the ones in lodash@4.18.1, cost nothing.

Summary

Togoder Security scanned the npm package lodash@4.18.1 on Oct 4, 2026. An AI review of 1044 source files produced 1 medium, 1 low severity findings. The overall verdict is medium: the findings flag risky but common patterns (dynamic code, unsafe defaults, broad file or network access) rather than confirmed malware.

critical

high

medium

low

Findings 2

medium

Dynamic Code Execution

NPS-4956E2B82D31

The template function compiles arbitrary strings into executable JavaScript functions using the Function constructor. This is an intentional design feature of Lodash's _.template utility for creating compiled template functions from strings. While the code itself is the legitimate Lodash template implementation and includes safeguards (validating forbidden characters in variable and imports names, escaping string literals, normalizing sourceURL whitespace), the function inherently enables code execution if used with untrusted template strings. The documentation itself explicitly warns that _.template is insecure and should not be used with untrusted input.

template.js:273

low

dynamic code execution

NPS-8B82729E1C3D

Uses Function('return this')() as a fallback to obtain the global object. While this is a common idiom in libraries like Lodash for environment detection, the 'new Function' constructor executes a string as code and can be flagged by static analyzers or CSP policies. In this specific context it is not malicious (it returns the global object), but it constitutes a dynamic code execution pattern that should be noted.

_root.js:7

Files reviewed

File	Verdict	What the reviewer saw
_root.js	medium	This appears to be a standard Lodash-style global object detection helper with no exfiltration, credential harvesting, or network activity, but it uses the Function constructor which is a dynamic code execution pattern worth noting.
template.js	medium	This is the legitimate Lodash `_.template` source file; it uses the Function constructor to compile template strings into functions, which is an intentional but security-sensitive design explicitly documented as insecure for untrusted input, with no evidence of malicious exfiltration, credential harvesting, or backdoor behavior.
_DataView.js	safe	Cleared by Jev triage; no further analysis needed
_Hash.js	safe	Cleared by Jev triage; no further analysis needed
_LazyWrapper.js	safe	Cleared by Jev triage; no further analysis needed
_ListCache.js	safe	Cleared by Jev triage; no further analysis needed
_LodashWrapper.js	safe	Cleared by Jev triage; no further analysis needed
_Map.js	safe	Cleared by Jev triage; no further analysis needed
_MapCache.js	safe	Cleared by Jev triage; no further analysis needed
_Promise.js	safe	Cleared by Jev triage; no further analysis needed
_Set.js	safe	Cleared by Jev triage; no further analysis needed
_SetCache.js	safe	Cleared by Jev triage; no further analysis needed
_Stack.js	safe	Cleared by Jev triage; no further analysis needed
_Symbol.js	safe	Cleared by Jev triage; no further analysis needed
_Uint8Array.js	safe	Cleared by Jev triage; no further analysis needed
_WeakMap.js	safe	Cleared by Jev triage; no further analysis needed
_apply.js	safe	Cleared by Jev triage; no further analysis needed
_arrayAggregator.js	safe	Cleared by Jev triage; no further analysis needed
_arrayEach.js	safe	Cleared by Jev triage; no further analysis needed
_arrayEachRight.js	safe	Cleared by Jev triage; no further analysis needed
_arrayEvery.js	safe	Cleared by Jev triage; no further analysis needed
_arrayFilter.js	safe	Cleared by Jev triage; no further analysis needed
_arrayIncludes.js	safe	Cleared by Jev triage; no further analysis needed
_arrayIncludesWith.js	safe	Cleared by Jev triage; no further analysis needed
_arrayLikeKeys.js	safe	Cleared by Jev triage; no further analysis needed

Show 1019 more files

File	Verdict	What the reviewer saw
_arrayMap.js	safe	Cleared by Jev triage; no further analysis needed
_arrayPush.js	safe	Cleared by Jev triage; no further analysis needed
_arrayReduce.js	safe	Cleared by Jev triage; no further analysis needed
_arrayReduceRight.js	safe	Cleared by Jev triage; no further analysis needed
_arraySample.js	safe	Cleared by Jev triage; no further analysis needed
_arraySampleSize.js	safe	Cleared by Jev triage; no further analysis needed
_arrayShuffle.js	safe	Cleared by Jev triage; no further analysis needed
_arraySome.js	safe	Cleared by Jev triage; no further analysis needed
_asciiSize.js	safe	Cleared by Jev triage; no further analysis needed
_asciiToArray.js	safe	Cleared by Jev triage; no further analysis needed
_asciiWords.js	safe	Cleared by Jev triage; no further analysis needed
_assignMergeValue.js	safe	Cleared by Jev triage; no further analysis needed
_assignValue.js	safe	Cleared by Jev triage; no further analysis needed
_assocIndexOf.js	safe	Cleared by Jev triage; no further analysis needed
_baseAggregator.js	safe	Cleared by Jev triage; no further analysis needed
_baseAssign.js	safe	Cleared by Jev triage; no further analysis needed
_baseAssignIn.js	safe	Cleared by Jev triage; no further analysis needed
_baseAssignValue.js	safe	No malicious patterns detected; the code is a standard Lodash internal helper for safe property assignment.
_baseAt.js	safe	Cleared by Jev triage; no further analysis needed
_baseClamp.js	safe	Cleared by Jev triage; no further analysis needed
_baseClone.js	safe	Cleared by Jev triage; no further analysis needed
_baseConforms.js	safe	Cleared by Jev triage; no further analysis needed
_baseConformsTo.js	safe	Cleared by Jev triage; no further analysis needed
_baseCreate.js	safe	Cleared by Jev triage; no further analysis needed
_baseDelay.js	safe	Cleared by Jev triage; no further analysis needed
_baseDifference.js	safe	Cleared by Jev triage; no further analysis needed
_baseEach.js	safe	Cleared by Jev triage; no further analysis needed
_baseEachRight.js	safe	Cleared by Jev triage; no further analysis needed
_baseEvery.js	safe	Cleared by Jev triage; no further analysis needed
_baseExtremum.js	safe	Cleared by Jev triage; no further analysis needed
_baseFill.js	safe	Cleared by Jev triage; no further analysis needed
_baseFilter.js	safe	Cleared by Jev triage; no further analysis needed
_baseFindIndex.js	safe	Cleared by Jev triage; no further analysis needed
_baseFindKey.js	safe	Cleared by Jev triage; no further analysis needed
_baseFlatten.js	safe	Cleared by Jev triage; no further analysis needed
_baseFor.js	safe	Cleared by Jev triage; no further analysis needed
_baseForOwn.js	safe	Cleared by Jev triage; no further analysis needed
_baseForOwnRight.js	safe	Cleared by Jev triage; no further analysis needed
_baseForRight.js	safe	Cleared by Jev triage; no further analysis needed
_baseFunctions.js	safe	Cleared by Jev triage; no further analysis needed
_baseGet.js	safe	Cleared by Jev triage; no further analysis needed
_baseGetAllKeys.js	safe	Cleared by Jev triage; no further analysis needed
_baseGetTag.js	safe	Cleared by Jev triage; no further analysis needed
_baseGt.js	safe	Cleared by Jev triage; no further analysis needed
_baseHas.js	safe	Cleared by Jev triage; no further analysis needed
_baseHasIn.js	safe	Cleared by Jev triage; no further analysis needed
_baseInRange.js	safe	Cleared by Jev triage; no further analysis needed
_baseIndexOf.js	safe	Cleared by Jev triage; no further analysis needed
_baseIndexOfWith.js	safe	Cleared by Jev triage; no further analysis needed
_baseIntersection.js	safe	Cleared by Jev triage; no further analysis needed
_baseInverter.js	safe	Cleared by Jev triage; no further analysis needed
_baseInvoke.js	safe	Cleared by Jev triage; no further analysis needed
_baseIsArguments.js	safe	Cleared by Jev triage; no further analysis needed
_baseIsArrayBuffer.js	safe	Cleared by Jev triage; no further analysis needed
_baseIsDate.js	safe	Cleared by Jev triage; no further analysis needed
_baseIsEqual.js	safe	Cleared by Jev triage; no further analysis needed
_baseIsEqualDeep.js	safe	Cleared by Jev triage; no further analysis needed
_baseIsMap.js	safe	Cleared by Jev triage; no further analysis needed
_baseIsMatch.js	safe	Cleared by Jev triage; no further analysis needed
_baseIsNaN.js	safe	Cleared by Jev triage; no further analysis needed
_baseIsNative.js	safe	Cleared by Jev triage; no further analysis needed
_baseIsRegExp.js	safe	Cleared by Jev triage; no further analysis needed
_baseIsSet.js	safe	Cleared by Jev triage; no further analysis needed
_baseIsTypedArray.js	safe	Cleared by Jev triage; no further analysis needed
_baseIteratee.js	safe	Cleared by Jev triage; no further analysis needed
_baseKeys.js	safe	Cleared by Jev triage; no further analysis needed
_baseKeysIn.js	safe	Cleared by Jev triage; no further analysis needed
_baseLodash.js	safe	Cleared by Jev triage; no further analysis needed
_baseLt.js	safe	Cleared by Jev triage; no further analysis needed
_baseMap.js	safe	Cleared by Jev triage; no further analysis needed
_baseMatches.js	safe	Cleared by Jev triage; no further analysis needed
_baseMatchesProperty.js	safe	Cleared by Jev triage; no further analysis needed
_baseMean.js	safe	Cleared by Jev triage; no further analysis needed
_baseMerge.js	safe	Cleared by Jev triage; no further analysis needed
_baseMergeDeep.js	safe	Cleared by Jev triage; no further analysis needed
_baseNth.js	safe	Cleared by Jev triage; no further analysis needed
_baseOrderBy.js	safe	Cleared by Jev triage; no further analysis needed
_basePick.js	safe	Cleared by Jev triage; no further analysis needed
_basePickBy.js	safe	Cleared by Jev triage; no further analysis needed
_baseProperty.js	safe	Cleared by Jev triage; no further analysis needed
_basePropertyDeep.js	safe	Cleared by Jev triage; no further analysis needed
_basePropertyOf.js	safe	Cleared by Jev triage; no further analysis needed
_basePullAll.js	safe	Cleared by Jev triage; no further analysis needed
_basePullAt.js	safe	Cleared by Jev triage; no further analysis needed
_baseRandom.js	safe	Cleared by Jev triage; no further analysis needed
_baseRange.js	safe	Cleared by Jev triage; no further analysis needed
_baseReduce.js	safe	Cleared by Jev triage; no further analysis needed
_baseRepeat.js	safe	Cleared by Jev triage; no further analysis needed
_baseRest.js	safe	Cleared by Jev triage; no further analysis needed
_baseSample.js	safe	Cleared by Jev triage; no further analysis needed
_baseSampleSize.js	safe	Cleared by Jev triage; no further analysis needed
_baseSet.js	safe	No malicious patterns detected
_baseSetData.js	safe	Cleared by Jev triage; no further analysis needed
_baseSetToString.js	safe	Cleared by Jev triage; no further analysis needed
_baseShuffle.js	safe	Cleared by Jev triage; no further analysis needed
_baseSlice.js	safe	Cleared by Jev triage; no further analysis needed
_baseSome.js	safe	Cleared by Jev triage; no further analysis needed
_baseSortBy.js	safe	Cleared by Jev triage; no further analysis needed
_baseSortedIndex.js	safe	Cleared by Jev triage; no further analysis needed
_baseSortedIndexBy.js	safe	Cleared by Jev triage; no further analysis needed
_baseSortedUniq.js	safe	Cleared by Jev triage; no further analysis needed
_baseSum.js	safe	Cleared by Jev triage; no further analysis needed
_baseTimes.js	safe	Cleared by Jev triage; no further analysis needed
_baseToNumber.js	safe	Cleared by Jev triage; no further analysis needed
_baseToPairs.js	safe	Cleared by Jev triage; no further analysis needed
_baseToString.js	safe	Cleared by Jev triage; no further analysis needed
_baseTrim.js	safe	Cleared by Jev triage; no further analysis needed
_baseUnary.js	safe	Cleared by Jev triage; no further analysis needed
_baseUniq.js	safe	Cleared by Jev triage; no further analysis needed
_baseUnset.js	safe	No malicious patterns detected; this is the standard Lodash `baseUnset` implementation with added prototype pollution safeguards.
_baseUpdate.js	safe	Cleared by Jev triage; no further analysis needed
_baseValues.js	safe	Cleared by Jev triage; no further analysis needed
_baseWhile.js	safe	Cleared by Jev triage; no further analysis needed
_baseWrapperValue.js	safe	Cleared by Jev triage; no further analysis needed
_baseXor.js	safe	Cleared by Jev triage; no further analysis needed
_baseZipObject.js	safe	Cleared by Jev triage; no further analysis needed
_cacheHas.js	safe	Cleared by Jev triage; no further analysis needed
_castArrayLikeObject.js	safe	Cleared by Jev triage; no further analysis needed
_castFunction.js	safe	Cleared by Jev triage; no further analysis needed
_castPath.js	safe	Cleared by Jev triage; no further analysis needed
_castRest.js	safe	Cleared by Jev triage; no further analysis needed
_castSlice.js	safe	Cleared by Jev triage; no further analysis needed
_charsEndIndex.js	safe	Cleared by Jev triage; no further analysis needed
_charsStartIndex.js	safe	Cleared by Jev triage; no further analysis needed
_cloneArrayBuffer.js	safe	Cleared by Jev triage; no further analysis needed
_cloneBuffer.js	safe	Cleared by Jev triage; no further analysis needed
_cloneDataView.js	safe	Cleared by Jev triage; no further analysis needed
_cloneRegExp.js	safe	Cleared by Jev triage; no further analysis needed
_cloneSymbol.js	safe	Cleared by Jev triage; no further analysis needed
_cloneTypedArray.js	safe	Cleared by Jev triage; no further analysis needed
_compareAscending.js	safe	Cleared by Jev triage; no further analysis needed
_compareMultiple.js	safe	Cleared by Jev triage; no further analysis needed
_composeArgs.js	safe	Cleared by Jev triage; no further analysis needed
_composeArgsRight.js	safe	Cleared by Jev triage; no further analysis needed
_copyArray.js	safe	Cleared by Jev triage; no further analysis needed
_copyObject.js	safe	Cleared by Jev triage; no further analysis needed
_copySymbols.js	safe	Cleared by Jev triage; no further analysis needed
_copySymbolsIn.js	safe	Cleared by Jev triage; no further analysis needed
_coreJsData.js	safe	Cleared by Jev triage; no further analysis needed
_countHolders.js	safe	Cleared by Jev triage; no further analysis needed
_createAggregator.js	safe	Cleared by Jev triage; no further analysis needed
_createAssigner.js	safe	Cleared by Jev triage; no further analysis needed
_createBaseEach.js	safe	Cleared by Jev triage; no further analysis needed
_createBaseFor.js	safe	Cleared by Jev triage; no further analysis needed
_createBind.js	safe	Cleared by Jev triage; no further analysis needed
_createCaseFirst.js	safe	Cleared by Jev triage; no further analysis needed
_createCompounder.js	safe	Cleared by Jev triage; no further analysis needed
_createCtor.js	safe	Cleared by Jev triage; no further analysis needed
_createCurry.js	safe	Cleared by Jev triage; no further analysis needed
_createFind.js	safe	Cleared by Jev triage; no further analysis needed
_createFlow.js	safe	Cleared by Jev triage; no further analysis needed
_createHybrid.js	safe	Cleared by Jev triage; no further analysis needed
_createInverter.js	safe	Cleared by Jev triage; no further analysis needed
_createMathOperation.js	safe	Cleared by Jev triage; no further analysis needed
_createOver.js	safe	Cleared by Jev triage; no further analysis needed
_createPadding.js	safe	Cleared by Jev triage; no further analysis needed
_createPartial.js	safe	Cleared by Jev triage; no further analysis needed
_createRange.js	safe	Cleared by Jev triage; no further analysis needed
_createRecurry.js	safe	Cleared by Jev triage; no further analysis needed
_createRelationalOperation.js	safe	Cleared by Jev triage; no further analysis needed
_createRound.js	safe	Cleared by Jev triage; no further analysis needed
_createSet.js	safe	No malicious patterns detected
_createToPairs.js	safe	Cleared by Jev triage; no further analysis needed
_createWrap.js	safe	Cleared by Jev triage; no further analysis needed
_customDefaultsAssignIn.js	safe	Cleared by Jev triage; no further analysis needed
_customDefaultsMerge.js	safe	Cleared by Jev triage; no further analysis needed
_customOmitClone.js	safe	Cleared by Jev triage; no further analysis needed
_deburrLetter.js	safe	Cleared by Jev triage; no further analysis needed
_defineProperty.js	safe	No malicious patterns detected; this is a standard lodash utility module that safely retrieves Object.defineProperty.
_equalArrays.js	safe	Cleared by Jev triage; no further analysis needed
_equalByTag.js	safe	Cleared by Jev triage; no further analysis needed
_equalObjects.js	safe	Cleared by Jev triage; no further analysis needed
_escapeHtmlChar.js	safe	Cleared by Jev triage; no further analysis needed
_escapeStringChar.js	safe	Cleared by Jev triage; no further analysis needed
_flatRest.js	safe	Cleared by Jev triage; no further analysis needed
_freeGlobal.js	safe	Cleared by Jev triage; no further analysis needed
_getAllKeys.js	safe	Cleared by Jev triage; no further analysis needed
_getAllKeysIn.js	safe	Cleared by Jev triage; no further analysis needed
_getData.js	safe	Cleared by Jev triage; no further analysis needed
_getFuncName.js	safe	Cleared by Jev triage; no further analysis needed
_getHolder.js	safe	Cleared by Jev triage; no further analysis needed
_getMapData.js	safe	Cleared by Jev triage; no further analysis needed
_getMatchData.js	safe	Cleared by Jev triage; no further analysis needed
_getNative.js	safe	Cleared by Jev triage; no further analysis needed
_getPrototype.js	safe	Cleared by Jev triage; no further analysis needed
_getRawTag.js	safe	Cleared by Jev triage; no further analysis needed
_getSymbols.js	safe	Cleared by Jev triage; no further analysis needed
_getSymbolsIn.js	safe	Cleared by Jev triage; no further analysis needed
_getTag.js	safe	No malicious patterns detected; this is a legitimate lodash internal utility for determining object toStringTag values.
_getValue.js	safe	Cleared by Jev triage; no further analysis needed
_getView.js	safe	Cleared by Jev triage; no further analysis needed
_getWrapDetails.js	safe	Cleared by Jev triage; no further analysis needed
_hasPath.js	safe	Cleared by Jev triage; no further analysis needed
_hasUnicode.js	safe	This file is a benign lodash utility for detecting Unicode characters in strings and contains no malicious patterns.
_hasUnicodeWord.js	safe	Cleared by Jev triage; no further analysis needed
_hashClear.js	safe	Cleared by Jev triage; no further analysis needed
_hashDelete.js	safe	Cleared by Jev triage; no further analysis needed
_hashGet.js	safe	Cleared by Jev triage; no further analysis needed
_hashHas.js	safe	Cleared by Jev triage; no further analysis needed
_hashSet.js	safe	Cleared by Jev triage; no further analysis needed
_initCloneArray.js	safe	Cleared by Jev triage; no further analysis needed
_initCloneByTag.js	safe	Cleared by Jev triage; no further analysis needed
_initCloneObject.js	safe	Cleared by Jev triage; no further analysis needed
_insertWrapDetails.js	safe	Cleared by Jev triage; no further analysis needed
_isFlattenable.js	safe	Cleared by Jev triage; no further analysis needed
_isIndex.js	safe	Cleared by Jev triage; no further analysis needed
_isIterateeCall.js	safe	Cleared by Jev triage; no further analysis needed
_isKey.js	safe	Cleared by Jev triage; no further analysis needed
_isKeyable.js	safe	Cleared by Jev triage; no further analysis needed
_isLaziable.js	safe	Cleared by Jev triage; no further analysis needed
_isMaskable.js	safe	Cleared by Jev triage; no further analysis needed
_isMasked.js	safe	Cleared by Jev triage; no further analysis needed
_isPrototype.js	safe	Cleared by Jev triage; no further analysis needed
_isStrictComparable.js	safe	Cleared by Jev triage; no further analysis needed
_iteratorToArray.js	safe	Cleared by Jev triage; no further analysis needed
_lazyClone.js	safe	Cleared by Jev triage; no further analysis needed
_lazyReverse.js	safe	Cleared by Jev triage; no further analysis needed
_lazyValue.js	safe	Cleared by Jev triage; no further analysis needed
_listCacheClear.js	safe	Cleared by Jev triage; no further analysis needed
_listCacheDelete.js	safe	Cleared by Jev triage; no further analysis needed
_listCacheGet.js	safe	Cleared by Jev triage; no further analysis needed
_listCacheHas.js	safe	Cleared by Jev triage; no further analysis needed
_listCacheSet.js	safe	Cleared by Jev triage; no further analysis needed
_mapCacheClear.js	safe	Cleared by Jev triage; no further analysis needed
_mapCacheDelete.js	safe	Cleared by Jev triage; no further analysis needed
_mapCacheGet.js	safe	Cleared by Jev triage; no further analysis needed
_mapCacheHas.js	safe	Cleared by Jev triage; no further analysis needed
_mapCacheSet.js	safe	Cleared by Jev triage; no further analysis needed
_mapToArray.js	safe	Cleared by Jev triage; no further analysis needed
_matchesStrictComparable.js	safe	Cleared by Jev triage; no further analysis needed
_memoizeCapped.js	safe	Cleared by Jev triage; no further analysis needed
_mergeData.js	safe	Cleared by Jev triage; no further analysis needed
_metaMap.js	safe	Cleared by Jev triage; no further analysis needed
_nativeCreate.js	safe	Cleared by Jev triage; no further analysis needed
_nativeKeys.js	safe	Cleared by Jev triage; no further analysis needed
_nativeKeysIn.js	safe	Cleared by Jev triage; no further analysis needed
_nodeUtil.js	safe	No malicious patterns detected; this is standard Lodash internal Node.js utility detection code.
_objectToString.js	safe	Cleared by Jev triage; no further analysis needed
_overArg.js	safe	Cleared by Jev triage; no further analysis needed
_overRest.js	safe	Cleared by Jev triage; no further analysis needed
_parent.js	safe	Cleared by Jev triage; no further analysis needed
_reEscape.js	safe	Cleared by Jev triage; no further analysis needed
_reEvaluate.js	safe	Cleared by Jev triage; no further analysis needed
_reInterpolate.js	safe	Cleared by Jev triage; no further analysis needed
_realNames.js	safe	Cleared by Jev triage; no further analysis needed
_reorder.js	safe	Cleared by Jev triage; no further analysis needed
_replaceHolders.js	safe	Cleared by Jev triage; no further analysis needed
_safeGet.js	safe	Cleared by Jev triage; no further analysis needed
_setCacheAdd.js	safe	Cleared by Jev triage; no further analysis needed
_setCacheHas.js	safe	Cleared by Jev triage; no further analysis needed
_setData.js	safe	Cleared by Jev triage; no further analysis needed
_setToArray.js	safe	Cleared by Jev triage; no further analysis needed
_setToPairs.js	safe	Cleared by Jev triage; no further analysis needed
_setToString.js	safe	Cleared by Jev triage; no further analysis needed
_setWrapToString.js	safe	Cleared by Jev triage; no further analysis needed
_shortOut.js	safe	Cleared by Jev triage; no further analysis needed
_shuffleSelf.js	safe	Cleared by Jev triage; no further analysis needed
_stackClear.js	safe	Cleared by Jev triage; no further analysis needed
_stackDelete.js	safe	Cleared by Jev triage; no further analysis needed
_stackGet.js	safe	Cleared by Jev triage; no further analysis needed
_stackHas.js	safe	Cleared by Jev triage; no further analysis needed
_stackSet.js	safe	Cleared by Jev triage; no further analysis needed
_strictIndexOf.js	safe	Cleared by Jev triage; no further analysis needed
_strictLastIndexOf.js	safe	Cleared by Jev triage; no further analysis needed
_stringSize.js	safe	Cleared by Jev triage; no further analysis needed
_stringToArray.js	safe	Cleared by Jev triage; no further analysis needed
_stringToPath.js	safe	Cleared by Jev triage; no further analysis needed
_toKey.js	safe	Cleared by Jev triage; no further analysis needed
_toSource.js	safe	Cleared by Jev triage; no further analysis needed
_trimmedEndIndex.js	safe	Cleared by Jev triage; no further analysis needed
_unescapeHtmlChar.js	safe	Cleared by Jev triage; no further analysis needed
_unicodeSize.js	safe	No malicious patterns detected
_unicodeToArray.js	safe	No malicious patterns detected
_unicodeWords.js	safe	No malicious patterns detected; the code is a pure Unicode word-splitting regex utility with no network, filesystem, process, or dynamic execution behavior.
_updateWrapDetails.js	safe	Cleared by Jev triage; no further analysis needed
_wrapperClone.js	safe	Cleared by Jev triage; no further analysis needed
add.js	safe	Cleared by Jev triage; no further analysis needed
after.js	safe	Cleared by Jev triage; no further analysis needed
array.js	safe	Cleared by Jev triage; no further analysis needed
ary.js	safe	Cleared by Jev triage; no further analysis needed
assign.js	safe	Cleared by Jev triage; no further analysis needed
assignIn.js	safe	Cleared by Jev triage; no further analysis needed
assignInWith.js	safe	Cleared by Jev triage; no further analysis needed
assignWith.js	safe	Cleared by Jev triage; no further analysis needed
at.js	safe	Cleared by Jev triage; no further analysis needed
attempt.js	safe	Cleared by Jev triage; no further analysis needed
before.js	safe	Cleared by Jev triage; no further analysis needed
bind.js	safe	Cleared by Jev triage; no further analysis needed
bindAll.js	safe	Cleared by Jev triage; no further analysis needed
bindKey.js	safe	Cleared by Jev triage; no further analysis needed
camelCase.js	safe	Cleared by Jev triage; no further analysis needed
capitalize.js	safe	Cleared by Jev triage; no further analysis needed
castArray.js	safe	Cleared by Jev triage; no further analysis needed
ceil.js	safe	Cleared by Jev triage; no further analysis needed
chain.js	safe	Cleared by Jev triage; no further analysis needed
chunk.js	safe	Cleared by Jev triage; no further analysis needed
clamp.js	safe	Cleared by Jev triage; no further analysis needed
clone.js	safe	Cleared by Jev triage; no further analysis needed
cloneDeep.js	safe	Cleared by Jev triage; no further analysis needed
cloneDeepWith.js	safe	Cleared by Jev triage; no further analysis needed
cloneWith.js	safe	Cleared by Jev triage; no further analysis needed
collection.js	safe	Cleared by Jev triage; no further analysis needed
commit.js	safe	Cleared by Jev triage; no further analysis needed
compact.js	safe	Cleared by Jev triage; no further analysis needed
concat.js	safe	Cleared by Jev triage; no further analysis needed
cond.js	safe	Cleared by Jev triage; no further analysis needed
conforms.js	safe	Cleared by Jev triage; no further analysis needed
conformsTo.js	safe	Cleared by Jev triage; no further analysis needed
constant.js	safe	Cleared by Jev triage; no further analysis needed
countBy.js	safe	Cleared by Jev triage; no further analysis needed
create.js	safe	Cleared by Jev triage; no further analysis needed
curry.js	safe	Cleared by Jev triage; no further analysis needed
curryRight.js	safe	Cleared by Jev triage; no further analysis needed
date.js	safe	Cleared by Jev triage; no further analysis needed
debounce.js	safe	Cleared by Jev triage; no further analysis needed
deburr.js	safe	Cleared by Jev triage; no further analysis needed
defaultTo.js	safe	Cleared by Jev triage; no further analysis needed
defaults.js	safe	Cleared by Jev triage; no further analysis needed
defaultsDeep.js	safe	Cleared by Jev triage; no further analysis needed
defer.js	safe	Cleared by Jev triage; no further analysis needed
delay.js	safe	Cleared by Jev triage; no further analysis needed
difference.js	safe	Cleared by Jev triage; no further analysis needed
differenceBy.js	safe	Cleared by Jev triage; no further analysis needed
differenceWith.js	safe	Cleared by Jev triage; no further analysis needed
divide.js	safe	Cleared by Jev triage; no further analysis needed
drop.js	safe	Cleared by Jev triage; no further analysis needed
dropRight.js	safe	Cleared by Jev triage; no further analysis needed
dropRightWhile.js	safe	Cleared by Jev triage; no further analysis needed
dropWhile.js	safe	Cleared by Jev triage; no further analysis needed
each.js	safe	Cleared by Jev triage; no further analysis needed
eachRight.js	safe	Cleared by Jev triage; no further analysis needed
endsWith.js	safe	Cleared by Jev triage; no further analysis needed
entries.js	safe	Cleared by Jev triage; no further analysis needed
entriesIn.js	safe	Cleared by Jev triage; no further analysis needed
eq.js	safe	Cleared by Jev triage; no further analysis needed
escape.js	safe	Cleared by Jev triage; no further analysis needed
escapeRegExp.js	safe	Cleared by Jev triage; no further analysis needed
every.js	safe	Cleared by Jev triage; no further analysis needed
extend.js	safe	Cleared by Jev triage; no further analysis needed
extendWith.js	safe	Cleared by Jev triage; no further analysis needed
fill.js	safe	Cleared by Jev triage; no further analysis needed
filter.js	safe	Cleared by Jev triage; no further analysis needed
find.js	safe	Cleared by Jev triage; no further analysis needed
findIndex.js	safe	Cleared by Jev triage; no further analysis needed
findKey.js	safe	Cleared by Jev triage; no further analysis needed
findLast.js	safe	Cleared by Jev triage; no further analysis needed
findLastIndex.js	safe	Cleared by Jev triage; no further analysis needed
findLastKey.js	safe	Cleared by Jev triage; no further analysis needed
first.js	safe	Cleared by Jev triage; no further analysis needed
flatMap.js	safe	Cleared by Jev triage; no further analysis needed
flatMapDeep.js	safe	Cleared by Jev triage; no further analysis needed
flatMapDepth.js	safe	Cleared by Jev triage; no further analysis needed
flatten.js	safe	Cleared by Jev triage; no further analysis needed
flattenDeep.js	safe	Cleared by Jev triage; no further analysis needed
flattenDepth.js	safe	Cleared by Jev triage; no further analysis needed
flip.js	safe	Cleared by Jev triage; no further analysis needed
floor.js	safe	Cleared by Jev triage; no further analysis needed
flow.js	safe	Cleared by Jev triage; no further analysis needed
flowRight.js	safe	Cleared by Jev triage; no further analysis needed
forEach.js	safe	Cleared by Jev triage; no further analysis needed
forEachRight.js	safe	Cleared by Jev triage; no further analysis needed
forIn.js	safe	Cleared by Jev triage; no further analysis needed
forInRight.js	safe	Cleared by Jev triage; no further analysis needed
forOwn.js	safe	Cleared by Jev triage; no further analysis needed
forOwnRight.js	safe	Cleared by Jev triage; no further analysis needed
fp.js	safe	No malicious patterns detected; the file simply re-exports a functional programming variant of lodash with no red-flag behavior.
fp/F.js	safe	Cleared by Jev triage; no further analysis needed
fp/T.js	safe	Cleared by Jev triage; no further analysis needed
fp/__.js	safe	Cleared by Jev triage; no further analysis needed
fp/_baseConvert.js	safe	Cleared by Jev triage; no further analysis needed
fp/_convertBrowser.js	safe	The file is a legitimate part of the lodash library's functional programming module and contains no malicious patterns or suspicious behavior.
fp/_falseOptions.js	safe	Cleared by Jev triage; no further analysis needed
fp/_mapping.js	safe	No malicious patterns detected; the file is a pure data mapping module with no executable or network logic.
fp/_util.js	safe	Cleared by Jev triage; no further analysis needed
fp/add.js	safe	Cleared by Jev triage; no further analysis needed
fp/after.js	safe	Cleared by Jev triage; no further analysis needed
fp/all.js	safe	Cleared by Jev triage; no further analysis needed
fp/allPass.js	safe	Cleared by Jev triage; no further analysis needed
fp/always.js	safe	Cleared by Jev triage; no further analysis needed
fp/any.js	safe	Cleared by Jev triage; no further analysis needed
fp/anyPass.js	safe	Cleared by Jev triage; no further analysis needed
fp/apply.js	safe	Cleared by Jev triage; no further analysis needed
fp/array.js	safe	Cleared by Jev triage; no further analysis needed
fp/ary.js	safe	Cleared by Jev triage; no further analysis needed
fp/assign.js	safe	Cleared by Jev triage; no further analysis needed
fp/assignAll.js	safe	Cleared by Jev triage; no further analysis needed
fp/assignAllWith.js	safe	Cleared by Jev triage; no further analysis needed
fp/assignIn.js	safe	Cleared by Jev triage; no further analysis needed
fp/assignInAll.js	safe	Cleared by Jev triage; no further analysis needed
fp/assignInAllWith.js	safe	Cleared by Jev triage; no further analysis needed
fp/assignInWith.js	safe	Cleared by Jev triage; no further analysis needed
fp/assignWith.js	safe	Cleared by Jev triage; no further analysis needed
fp/assoc.js	safe	Cleared by Jev triage; no further analysis needed
fp/assocPath.js	safe	Cleared by Jev triage; no further analysis needed
fp/at.js	safe	Cleared by Jev triage; no further analysis needed
fp/attempt.js	safe	Cleared by Jev triage; no further analysis needed
fp/before.js	safe	Cleared by Jev triage; no further analysis needed
fp/bind.js	safe	Cleared by Jev triage; no further analysis needed
fp/bindAll.js	safe	Cleared by Jev triage; no further analysis needed
fp/bindKey.js	safe	Cleared by Jev triage; no further analysis needed
fp/camelCase.js	safe	Cleared by Jev triage; no further analysis needed
fp/capitalize.js	safe	Cleared by Jev triage; no further analysis needed
fp/castArray.js	safe	Cleared by Jev triage; no further analysis needed
fp/ceil.js	safe	Cleared by Jev triage; no further analysis needed
fp/chain.js	safe	Cleared by Jev triage; no further analysis needed
fp/chunk.js	safe	Cleared by Jev triage; no further analysis needed
fp/clamp.js	safe	Cleared by Jev triage; no further analysis needed
fp/clone.js	safe	Cleared by Jev triage; no further analysis needed
fp/cloneDeep.js	safe	Cleared by Jev triage; no further analysis needed
fp/cloneDeepWith.js	safe	Cleared by Jev triage; no further analysis needed
fp/cloneWith.js	safe	Cleared by Jev triage; no further analysis needed
fp/collection.js	safe	Cleared by Jev triage; no further analysis needed
fp/commit.js	safe	Cleared by Jev triage; no further analysis needed
fp/compact.js	safe	Cleared by Jev triage; no further analysis needed
fp/complement.js	safe	Cleared by Jev triage; no further analysis needed
fp/compose.js	safe	Cleared by Jev triage; no further analysis needed
fp/concat.js	safe	Cleared by Jev triage; no further analysis needed
fp/cond.js	safe	Cleared by Jev triage; no further analysis needed
fp/conforms.js	safe	Cleared by Jev triage; no further analysis needed
fp/conformsTo.js	safe	Cleared by Jev triage; no further analysis needed
fp/constant.js	safe	Cleared by Jev triage; no further analysis needed
fp/contains.js	safe	Cleared by Jev triage; no further analysis needed
fp/convert.js	safe	Cleared by Jev triage; no further analysis needed
fp/countBy.js	safe	Cleared by Jev triage; no further analysis needed
fp/create.js	safe	Cleared by Jev triage; no further analysis needed
fp/curry.js	safe	Cleared by Jev triage; no further analysis needed
fp/curryN.js	safe	Cleared by Jev triage; no further analysis needed
fp/curryRight.js	safe	Cleared by Jev triage; no further analysis needed
fp/curryRightN.js	safe	Cleared by Jev triage; no further analysis needed
fp/date.js	safe	Cleared by Jev triage; no further analysis needed
fp/debounce.js	safe	Cleared by Jev triage; no further analysis needed
fp/deburr.js	safe	Cleared by Jev triage; no further analysis needed
fp/defaultTo.js	safe	Cleared by Jev triage; no further analysis needed
fp/defaults.js	safe	Cleared by Jev triage; no further analysis needed
fp/defaultsAll.js	safe	Cleared by Jev triage; no further analysis needed
fp/defaultsDeep.js	safe	Cleared by Jev triage; no further analysis needed
fp/defaultsDeepAll.js	safe	Cleared by Jev triage; no further analysis needed
fp/defer.js	safe	Cleared by Jev triage; no further analysis needed
fp/delay.js	safe	Cleared by Jev triage; no further analysis needed
fp/difference.js	safe	Cleared by Jev triage; no further analysis needed
fp/differenceBy.js	safe	Cleared by Jev triage; no further analysis needed
fp/differenceWith.js	safe	Cleared by Jev triage; no further analysis needed
fp/dissoc.js	safe	Cleared by Jev triage; no further analysis needed
fp/dissocPath.js	safe	Cleared by Jev triage; no further analysis needed
fp/divide.js	safe	Cleared by Jev triage; no further analysis needed
fp/drop.js	safe	Cleared by Jev triage; no further analysis needed
fp/dropLast.js	safe	Cleared by Jev triage; no further analysis needed
fp/dropLastWhile.js	safe	Cleared by Jev triage; no further analysis needed
fp/dropRight.js	safe	Cleared by Jev triage; no further analysis needed
fp/dropRightWhile.js	safe	Cleared by Jev triage; no further analysis needed
fp/dropWhile.js	safe	Cleared by Jev triage; no further analysis needed
fp/each.js	safe	Cleared by Jev triage; no further analysis needed
fp/eachRight.js	safe	Cleared by Jev triage; no further analysis needed
fp/endsWith.js	safe	Cleared by Jev triage; no further analysis needed
fp/entries.js	safe	Cleared by Jev triage; no further analysis needed
fp/entriesIn.js	safe	Cleared by Jev triage; no further analysis needed
fp/eq.js	safe	Cleared by Jev triage; no further analysis needed
fp/equals.js	safe	Cleared by Jev triage; no further analysis needed
fp/escape.js	safe	Cleared by Jev triage; no further analysis needed
fp/escapeRegExp.js	safe	Cleared by Jev triage; no further analysis needed
fp/every.js	safe	Cleared by Jev triage; no further analysis needed
fp/extend.js	safe	Cleared by Jev triage; no further analysis needed
fp/extendAll.js	safe	Cleared by Jev triage; no further analysis needed
fp/extendAllWith.js	safe	Cleared by Jev triage; no further analysis needed
fp/extendWith.js	safe	Cleared by Jev triage; no further analysis needed
fp/fill.js	safe	Cleared by Jev triage; no further analysis needed
fp/filter.js	safe	Cleared by Jev triage; no further analysis needed
fp/find.js	safe	Cleared by Jev triage; no further analysis needed
fp/findFrom.js	safe	Cleared by Jev triage; no further analysis needed
fp/findIndex.js	safe	Cleared by Jev triage; no further analysis needed
fp/findIndexFrom.js	safe	Cleared by Jev triage; no further analysis needed
fp/findKey.js	safe	Cleared by Jev triage; no further analysis needed
fp/findLast.js	safe	Cleared by Jev triage; no further analysis needed
fp/findLastFrom.js	safe	Cleared by Jev triage; no further analysis needed
fp/findLastIndex.js	safe	Cleared by Jev triage; no further analysis needed
fp/findLastIndexFrom.js	safe	Cleared by Jev triage; no further analysis needed
fp/findLastKey.js	safe	Cleared by Jev triage; no further analysis needed
fp/first.js	safe	Cleared by Jev triage; no further analysis needed
fp/flatMap.js	safe	Cleared by Jev triage; no further analysis needed
fp/flatMapDeep.js	safe	Cleared by Jev triage; no further analysis needed
fp/flatMapDepth.js	safe	Cleared by Jev triage; no further analysis needed
fp/flatten.js	safe	Cleared by Jev triage; no further analysis needed
fp/flattenDeep.js	safe	Cleared by Jev triage; no further analysis needed
fp/flattenDepth.js	safe	Cleared by Jev triage; no further analysis needed
fp/flip.js	safe	Cleared by Jev triage; no further analysis needed
fp/floor.js	safe	Cleared by Jev triage; no further analysis needed
fp/flow.js	safe	Cleared by Jev triage; no further analysis needed
fp/flowRight.js	safe	Cleared by Jev triage; no further analysis needed
fp/forEach.js	safe	Cleared by Jev triage; no further analysis needed
fp/forEachRight.js	safe	Cleared by Jev triage; no further analysis needed
fp/forIn.js	safe	Cleared by Jev triage; no further analysis needed
fp/forInRight.js	safe	Cleared by Jev triage; no further analysis needed
fp/forOwn.js	safe	Cleared by Jev triage; no further analysis needed
fp/forOwnRight.js	safe	Cleared by Jev triage; no further analysis needed
fp/fromPairs.js	safe	Cleared by Jev triage; no further analysis needed
fp/function.js	safe	Cleared by Jev triage; no further analysis needed
fp/functions.js	safe	Cleared by Jev triage; no further analysis needed
fp/functionsIn.js	safe	Cleared by Jev triage; no further analysis needed
fp/get.js	safe	Cleared by Jev triage; no further analysis needed
fp/getOr.js	safe	Cleared by Jev triage; no further analysis needed
fp/groupBy.js	safe	Cleared by Jev triage; no further analysis needed
fp/gt.js	safe	Cleared by Jev triage; no further analysis needed
fp/gte.js	safe	Cleared by Jev triage; no further analysis needed
fp/has.js	safe	Cleared by Jev triage; no further analysis needed
fp/hasIn.js	safe	Cleared by Jev triage; no further analysis needed
fp/head.js	safe	Cleared by Jev triage; no further analysis needed
fp/identical.js	safe	Cleared by Jev triage; no further analysis needed
fp/identity.js	safe	Cleared by Jev triage; no further analysis needed
fp/inRange.js	safe	Cleared by Jev triage; no further analysis needed
fp/includes.js	safe	Cleared by Jev triage; no further analysis needed
fp/includesFrom.js	safe	Cleared by Jev triage; no further analysis needed
fp/indexBy.js	safe	Cleared by Jev triage; no further analysis needed
fp/indexOf.js	safe	Cleared by Jev triage; no further analysis needed
fp/indexOfFrom.js	safe	Cleared by Jev triage; no further analysis needed
fp/init.js	safe	Cleared by Jev triage; no further analysis needed
fp/initial.js	safe	Cleared by Jev triage; no further analysis needed
fp/intersection.js	safe	Cleared by Jev triage; no further analysis needed
fp/intersectionBy.js	safe	Cleared by Jev triage; no further analysis needed
fp/intersectionWith.js	safe	Cleared by Jev triage; no further analysis needed
fp/invert.js	safe	Cleared by Jev triage; no further analysis needed
fp/invertBy.js	safe	Cleared by Jev triage; no further analysis needed
fp/invertObj.js	safe	Cleared by Jev triage; no further analysis needed
fp/invoke.js	safe	Cleared by Jev triage; no further analysis needed
fp/invokeArgs.js	safe	Cleared by Jev triage; no further analysis needed
fp/invokeArgsMap.js	safe	Cleared by Jev triage; no further analysis needed
fp/invokeMap.js	safe	Cleared by Jev triage; no further analysis needed
fp/isArguments.js	safe	Cleared by Jev triage; no further analysis needed
fp/isArray.js	safe	Cleared by Jev triage; no further analysis needed
fp/isArrayBuffer.js	safe	Cleared by Jev triage; no further analysis needed
fp/isArrayLike.js	safe	Cleared by Jev triage; no further analysis needed
fp/isArrayLikeObject.js	safe	Cleared by Jev triage; no further analysis needed
fp/isBoolean.js	safe	Cleared by Jev triage; no further analysis needed
fp/isBuffer.js	safe	Cleared by Jev triage; no further analysis needed
fp/isDate.js	safe	Cleared by Jev triage; no further analysis needed
fp/isElement.js	safe	Cleared by Jev triage; no further analysis needed
fp/isEmpty.js	safe	Cleared by Jev triage; no further analysis needed
fp/isEqual.js	safe	Cleared by Jev triage; no further analysis needed
fp/isEqualWith.js	safe	Cleared by Jev triage; no further analysis needed
fp/isError.js	safe	Cleared by Jev triage; no further analysis needed
fp/isFinite.js	safe	Cleared by Jev triage; no further analysis needed
fp/isFunction.js	safe	Cleared by Jev triage; no further analysis needed
fp/isInteger.js	safe	Cleared by Jev triage; no further analysis needed
fp/isLength.js	safe	Cleared by Jev triage; no further analysis needed
fp/isMap.js	safe	Cleared by Jev triage; no further analysis needed
fp/isMatch.js	safe	Cleared by Jev triage; no further analysis needed
fp/isMatchWith.js	safe	Cleared by Jev triage; no further analysis needed
fp/isNaN.js	safe	Cleared by Jev triage; no further analysis needed
fp/isNative.js	safe	Cleared by Jev triage; no further analysis needed
fp/isNil.js	safe	Cleared by Jev triage; no further analysis needed
fp/isNull.js	safe	Cleared by Jev triage; no further analysis needed
fp/isNumber.js	safe	Cleared by Jev triage; no further analysis needed
fp/isObject.js	safe	Cleared by Jev triage; no further analysis needed
fp/isObjectLike.js	safe	Cleared by Jev triage; no further analysis needed
fp/isPlainObject.js	safe	Cleared by Jev triage; no further analysis needed
fp/isRegExp.js	safe	Cleared by Jev triage; no further analysis needed
fp/isSafeInteger.js	safe	Cleared by Jev triage; no further analysis needed
fp/isSet.js	safe	Cleared by Jev triage; no further analysis needed
fp/isString.js	safe	Cleared by Jev triage; no further analysis needed
fp/isSymbol.js	safe	Cleared by Jev triage; no further analysis needed
fp/isTypedArray.js	safe	Cleared by Jev triage; no further analysis needed
fp/isUndefined.js	safe	Cleared by Jev triage; no further analysis needed
fp/isWeakMap.js	safe	Cleared by Jev triage; no further analysis needed
fp/isWeakSet.js	safe	Cleared by Jev triage; no further analysis needed
fp/iteratee.js	safe	Cleared by Jev triage; no further analysis needed
fp/join.js	safe	Cleared by Jev triage; no further analysis needed
fp/juxt.js	safe	Cleared by Jev triage; no further analysis needed
fp/kebabCase.js	safe	Cleared by Jev triage; no further analysis needed
fp/keyBy.js	safe	Cleared by Jev triage; no further analysis needed
fp/keys.js	safe	Cleared by Jev triage; no further analysis needed
fp/keysIn.js	safe	Cleared by Jev triage; no further analysis needed
fp/lang.js	safe	No malicious patterns detected; the file is a simple re-export wrapper for lodash-style utilities.
fp/last.js	safe	Cleared by Jev triage; no further analysis needed
fp/lastIndexOf.js	safe	Cleared by Jev triage; no further analysis needed
fp/lastIndexOfFrom.js	safe	Cleared by Jev triage; no further analysis needed
fp/lowerCase.js	safe	Cleared by Jev triage; no further analysis needed
fp/lowerFirst.js	safe	Cleared by Jev triage; no further analysis needed
fp/lt.js	safe	Cleared by Jev triage; no further analysis needed
fp/lte.js	safe	Cleared by Jev triage; no further analysis needed
fp/map.js	safe	Cleared by Jev triage; no further analysis needed
fp/mapKeys.js	safe	Cleared by Jev triage; no further analysis needed
fp/mapValues.js	safe	Cleared by Jev triage; no further analysis needed
fp/matches.js	safe	Cleared by Jev triage; no further analysis needed
fp/matchesProperty.js	safe	Cleared by Jev triage; no further analysis needed
fp/math.js	safe	Cleared by Jev triage; no further analysis needed
fp/max.js	safe	Cleared by Jev triage; no further analysis needed
fp/maxBy.js	safe	Cleared by Jev triage; no further analysis needed
fp/mean.js	safe	Cleared by Jev triage; no further analysis needed
fp/meanBy.js	safe	Cleared by Jev triage; no further analysis needed
fp/memoize.js	safe	Cleared by Jev triage; no further analysis needed
fp/merge.js	safe	Cleared by Jev triage; no further analysis needed
fp/mergeAll.js	safe	Cleared by Jev triage; no further analysis needed
fp/mergeAllWith.js	safe	Cleared by Jev triage; no further analysis needed
fp/mergeWith.js	safe	Cleared by Jev triage; no further analysis needed
fp/method.js	safe	Cleared by Jev triage; no further analysis needed
fp/methodOf.js	safe	Cleared by Jev triage; no further analysis needed
fp/min.js	safe	Cleared by Jev triage; no further analysis needed
fp/minBy.js	safe	Cleared by Jev triage; no further analysis needed
fp/mixin.js	safe	Cleared by Jev triage; no further analysis needed
fp/multiply.js	safe	Cleared by Jev triage; no further analysis needed
fp/nAry.js	safe	Cleared by Jev triage; no further analysis needed
fp/negate.js	safe	Cleared by Jev triage; no further analysis needed
fp/next.js	safe	Cleared by Jev triage; no further analysis needed
fp/noop.js	safe	Cleared by Jev triage; no further analysis needed
fp/now.js	safe	Cleared by Jev triage; no further analysis needed
fp/nth.js	safe	Cleared by Jev triage; no further analysis needed
fp/nthArg.js	safe	Cleared by Jev triage; no further analysis needed
fp/number.js	safe	Cleared by Jev triage; no further analysis needed
fp/object.js	safe	Cleared by Jev triage; no further analysis needed
fp/omit.js	safe	Cleared by Jev triage; no further analysis needed
fp/omitAll.js	safe	Cleared by Jev triage; no further analysis needed
fp/omitBy.js	safe	Cleared by Jev triage; no further analysis needed
fp/once.js	safe	Cleared by Jev triage; no further analysis needed
fp/orderBy.js	safe	Cleared by Jev triage; no further analysis needed
fp/over.js	safe	Cleared by Jev triage; no further analysis needed
fp/overArgs.js	safe	Cleared by Jev triage; no further analysis needed
fp/overEvery.js	safe	Cleared by Jev triage; no further analysis needed
fp/overSome.js	safe	Cleared by Jev triage; no further analysis needed
fp/pad.js	safe	Cleared by Jev triage; no further analysis needed
fp/padChars.js	safe	Cleared by Jev triage; no further analysis needed
fp/padCharsEnd.js	safe	Cleared by Jev triage; no further analysis needed
fp/padCharsStart.js	safe	Cleared by Jev triage; no further analysis needed
fp/padEnd.js	safe	Cleared by Jev triage; no further analysis needed
fp/padStart.js	safe	Cleared by Jev triage; no further analysis needed
fp/parseInt.js	safe	Cleared by Jev triage; no further analysis needed
fp/partial.js	safe	Cleared by Jev triage; no further analysis needed
fp/partialRight.js	safe	Cleared by Jev triage; no further analysis needed
fp/partition.js	safe	Cleared by Jev triage; no further analysis needed
fp/path.js	safe	Cleared by Jev triage; no further analysis needed
fp/pathEq.js	safe	Cleared by Jev triage; no further analysis needed
fp/pathOr.js	safe	Cleared by Jev triage; no further analysis needed
fp/paths.js	safe	Cleared by Jev triage; no further analysis needed
fp/pick.js	safe	Cleared by Jev triage; no further analysis needed
fp/pickAll.js	safe	Cleared by Jev triage; no further analysis needed
fp/pickBy.js	safe	Cleared by Jev triage; no further analysis needed
fp/pipe.js	safe	Cleared by Jev triage; no further analysis needed
fp/placeholder.js	safe	Cleared by Jev triage; no further analysis needed
fp/plant.js	safe	Cleared by Jev triage; no further analysis needed
fp/pluck.js	safe	Cleared by Jev triage; no further analysis needed
fp/prop.js	safe	Cleared by Jev triage; no further analysis needed
fp/propEq.js	safe	Cleared by Jev triage; no further analysis needed
fp/propOr.js	safe	Cleared by Jev triage; no further analysis needed
fp/property.js	safe	Cleared by Jev triage; no further analysis needed
fp/propertyOf.js	safe	Cleared by Jev triage; no further analysis needed
fp/props.js	safe	Cleared by Jev triage; no further analysis needed
fp/pull.js	safe	Cleared by Jev triage; no further analysis needed
fp/pullAll.js	safe	Cleared by Jev triage; no further analysis needed
fp/pullAllBy.js	safe	Cleared by Jev triage; no further analysis needed
fp/pullAllWith.js	safe	Cleared by Jev triage; no further analysis needed
fp/pullAt.js	safe	Cleared by Jev triage; no further analysis needed
fp/random.js	safe	Cleared by Jev triage; no further analysis needed
fp/range.js	safe	Cleared by Jev triage; no further analysis needed
fp/rangeRight.js	safe	Cleared by Jev triage; no further analysis needed
fp/rangeStep.js	safe	Cleared by Jev triage; no further analysis needed
fp/rangeStepRight.js	safe	Cleared by Jev triage; no further analysis needed
fp/rearg.js	safe	Cleared by Jev triage; no further analysis needed
fp/reduce.js	safe	Cleared by Jev triage; no further analysis needed
fp/reduceRight.js	safe	Cleared by Jev triage; no further analysis needed
fp/reject.js	safe	Cleared by Jev triage; no further analysis needed
fp/remove.js	safe	Cleared by Jev triage; no further analysis needed
fp/repeat.js	safe	Cleared by Jev triage; no further analysis needed
fp/replace.js	safe	Cleared by Jev triage; no further analysis needed
fp/rest.js	safe	Cleared by Jev triage; no further analysis needed
fp/restFrom.js	safe	Cleared by Jev triage; no further analysis needed
fp/result.js	safe	Cleared by Jev triage; no further analysis needed
fp/reverse.js	safe	Cleared by Jev triage; no further analysis needed
fp/round.js	safe	Cleared by Jev triage; no further analysis needed
fp/sample.js	safe	Cleared by Jev triage; no further analysis needed
fp/sampleSize.js	safe	Cleared by Jev triage; no further analysis needed
fp/seq.js	safe	Cleared by Jev triage; no further analysis needed
fp/set.js	safe	Cleared by Jev triage; no further analysis needed
fp/setWith.js	safe	Cleared by Jev triage; no further analysis needed
fp/shuffle.js	safe	Cleared by Jev triage; no further analysis needed
fp/size.js	safe	Cleared by Jev triage; no further analysis needed
fp/slice.js	safe	Cleared by Jev triage; no further analysis needed
fp/snakeCase.js	safe	Cleared by Jev triage; no further analysis needed
fp/some.js	safe	Cleared by Jev triage; no further analysis needed
fp/sortBy.js	safe	Cleared by Jev triage; no further analysis needed
fp/sortedIndex.js	safe	Cleared by Jev triage; no further analysis needed
fp/sortedIndexBy.js	safe	Cleared by Jev triage; no further analysis needed
fp/sortedIndexOf.js	safe	Cleared by Jev triage; no further analysis needed
fp/sortedLastIndex.js	safe	Cleared by Jev triage; no further analysis needed
fp/sortedLastIndexBy.js	safe	Cleared by Jev triage; no further analysis needed
fp/sortedLastIndexOf.js	safe	Cleared by Jev triage; no further analysis needed
fp/sortedUniq.js	safe	Cleared by Jev triage; no further analysis needed
fp/sortedUniqBy.js	safe	Cleared by Jev triage; no further analysis needed
fp/split.js	safe	Cleared by Jev triage; no further analysis needed
fp/spread.js	safe	Cleared by Jev triage; no further analysis needed
fp/spreadFrom.js	safe	Cleared by Jev triage; no further analysis needed
fp/startCase.js	safe	Cleared by Jev triage; no further analysis needed
fp/startsWith.js	safe	Cleared by Jev triage; no further analysis needed
fp/string.js	safe	Cleared by Jev triage; no further analysis needed
fp/stubArray.js	safe	Cleared by Jev triage; no further analysis needed
fp/stubFalse.js	safe	Cleared by Jev triage; no further analysis needed
fp/stubObject.js	safe	Cleared by Jev triage; no further analysis needed
fp/stubString.js	safe	Cleared by Jev triage; no further analysis needed
fp/stubTrue.js	safe	Cleared by Jev triage; no further analysis needed
fp/subtract.js	safe	Cleared by Jev triage; no further analysis needed
fp/sum.js	safe	Cleared by Jev triage; no further analysis needed
fp/sumBy.js	safe	Cleared by Jev triage; no further analysis needed
fp/symmetricDifference.js	safe	Cleared by Jev triage; no further analysis needed
fp/symmetricDifferenceBy.js	safe	Cleared by Jev triage; no further analysis needed
fp/symmetricDifferenceWith.js	safe	Cleared by Jev triage; no further analysis needed
fp/tail.js	safe	Cleared by Jev triage; no further analysis needed
fp/take.js	safe	Cleared by Jev triage; no further analysis needed
fp/takeLast.js	safe	Cleared by Jev triage; no further analysis needed
fp/takeLastWhile.js	safe	Cleared by Jev triage; no further analysis needed
fp/takeRight.js	safe	Cleared by Jev triage; no further analysis needed
fp/takeRightWhile.js	safe	Cleared by Jev triage; no further analysis needed
fp/takeWhile.js	safe	Cleared by Jev triage; no further analysis needed
fp/tap.js	safe	Cleared by Jev triage; no further analysis needed
fp/template.js	safe	Cleared by Jev triage; no further analysis needed
fp/templateSettings.js	safe	Cleared by Jev triage; no further analysis needed
fp/throttle.js	safe	Cleared by Jev triage; no further analysis needed
fp/thru.js	safe	Cleared by Jev triage; no further analysis needed
fp/times.js	safe	Cleared by Jev triage; no further analysis needed
fp/toArray.js	safe	Cleared by Jev triage; no further analysis needed
fp/toFinite.js	safe	Cleared by Jev triage; no further analysis needed
fp/toInteger.js	safe	Cleared by Jev triage; no further analysis needed
fp/toIterator.js	safe	Cleared by Jev triage; no further analysis needed
fp/toJSON.js	safe	Cleared by Jev triage; no further analysis needed
fp/toLength.js	safe	Cleared by Jev triage; no further analysis needed
fp/toLower.js	safe	Cleared by Jev triage; no further analysis needed
fp/toNumber.js	safe	Cleared by Jev triage; no further analysis needed
fp/toPairs.js	safe	Cleared by Jev triage; no further analysis needed
fp/toPairsIn.js	safe	Cleared by Jev triage; no further analysis needed
fp/toPath.js	safe	Cleared by Jev triage; no further analysis needed
fp/toPlainObject.js	safe	Cleared by Jev triage; no further analysis needed
fp/toSafeInteger.js	safe	Cleared by Jev triage; no further analysis needed
fp/toString.js	safe	Cleared by Jev triage; no further analysis needed
fp/toUpper.js	safe	Cleared by Jev triage; no further analysis needed
fp/transform.js	safe	Cleared by Jev triage; no further analysis needed
fp/trim.js	safe	Cleared by Jev triage; no further analysis needed
fp/trimChars.js	safe	Cleared by Jev triage; no further analysis needed
fp/trimCharsEnd.js	safe	Cleared by Jev triage; no further analysis needed
fp/trimCharsStart.js	safe	Cleared by Jev triage; no further analysis needed
fp/trimEnd.js	safe	Cleared by Jev triage; no further analysis needed
fp/trimStart.js	safe	Cleared by Jev triage; no further analysis needed
fp/truncate.js	safe	Cleared by Jev triage; no further analysis needed
fp/unapply.js	safe	Cleared by Jev triage; no further analysis needed
fp/unary.js	safe	Cleared by Jev triage; no further analysis needed
fp/unescape.js	safe	Cleared by Jev triage; no further analysis needed
fp/union.js	safe	Cleared by Jev triage; no further analysis needed
fp/unionBy.js	safe	Cleared by Jev triage; no further analysis needed
fp/unionWith.js	safe	Cleared by Jev triage; no further analysis needed
fp/uniq.js	safe	Cleared by Jev triage; no further analysis needed
fp/uniqBy.js	safe	Cleared by Jev triage; no further analysis needed
fp/uniqWith.js	safe	Cleared by Jev triage; no further analysis needed
fp/uniqueId.js	safe	Cleared by Jev triage; no further analysis needed
fp/unnest.js	safe	Cleared by Jev triage; no further analysis needed
fp/unset.js	safe	Cleared by Jev triage; no further analysis needed
fp/unzip.js	safe	Cleared by Jev triage; no further analysis needed
fp/unzipWith.js	safe	Cleared by Jev triage; no further analysis needed
fp/update.js	safe	Cleared by Jev triage; no further analysis needed
fp/updateWith.js	safe	Cleared by Jev triage; no further analysis needed
fp/upperCase.js	safe	Cleared by Jev triage; no further analysis needed
fp/upperFirst.js	safe	Cleared by Jev triage; no further analysis needed
fp/useWith.js	safe	Cleared by Jev triage; no further analysis needed
fp/util.js	safe	This 2-line module simply re-exports a converted version of the parent util module; no malicious patterns detected.
fp/value.js	safe	Cleared by Jev triage; no further analysis needed
fp/valueOf.js	safe	Cleared by Jev triage; no further analysis needed
fp/values.js	safe	Cleared by Jev triage; no further analysis needed
fp/valuesIn.js	safe	Cleared by Jev triage; no further analysis needed
fp/where.js	safe	Cleared by Jev triage; no further analysis needed
fp/whereEq.js	safe	Cleared by Jev triage; no further analysis needed
fp/without.js	safe	Cleared by Jev triage; no further analysis needed
fp/words.js	safe	Cleared by Jev triage; no further analysis needed
fp/wrap.js	safe	Cleared by Jev triage; no further analysis needed
fp/wrapperAt.js	safe	Cleared by Jev triage; no further analysis needed
fp/wrapperChain.js	safe	Cleared by Jev triage; no further analysis needed
fp/wrapperLodash.js	safe	Cleared by Jev triage; no further analysis needed
fp/wrapperReverse.js	safe	Cleared by Jev triage; no further analysis needed
fp/wrapperValue.js	safe	Cleared by Jev triage; no further analysis needed
fp/xor.js	safe	Cleared by Jev triage; no further analysis needed
fp/xorBy.js	safe	Cleared by Jev triage; no further analysis needed
fp/xorWith.js	safe	Cleared by Jev triage; no further analysis needed
fp/zip.js	safe	Cleared by Jev triage; no further analysis needed
fp/zipAll.js	safe	Cleared by Jev triage; no further analysis needed
fp/zipObj.js	safe	Cleared by Jev triage; no further analysis needed
fp/zipObject.js	safe	Cleared by Jev triage; no further analysis needed
fp/zipObjectDeep.js	safe	Cleared by Jev triage; no further analysis needed
fp/zipWith.js	safe	Cleared by Jev triage; no further analysis needed
fromPairs.js	safe	Cleared by Jev triage; no further analysis needed
function.js	safe	Cleared by Jev triage; no further analysis needed
functions.js	safe	Cleared by Jev triage; no further analysis needed
functionsIn.js	safe	Cleared by Jev triage; no further analysis needed
get.js	safe	Cleared by Jev triage; no further analysis needed
groupBy.js	safe	Cleared by Jev triage; no further analysis needed
gt.js	safe	Cleared by Jev triage; no further analysis needed
gte.js	safe	Cleared by Jev triage; no further analysis needed
has.js	safe	Cleared by Jev triage; no further analysis needed
hasIn.js	safe	Cleared by Jev triage; no further analysis needed
head.js	safe	Cleared by Jev triage; no further analysis needed
identity.js	safe	Cleared by Jev triage; no further analysis needed
inRange.js	safe	Cleared by Jev triage; no further analysis needed
includes.js	safe	Cleared by Jev triage; no further analysis needed
index.js	safe	Cleared by Jev triage; no further analysis needed
indexOf.js	safe	Cleared by Jev triage; no further analysis needed
initial.js	safe	Cleared by Jev triage; no further analysis needed
intersection.js	safe	Cleared by Jev triage; no further analysis needed
intersectionBy.js	safe	Cleared by Jev triage; no further analysis needed
intersectionWith.js	safe	Cleared by Jev triage; no further analysis needed
invert.js	safe	Cleared by Jev triage; no further analysis needed
invertBy.js	safe	Cleared by Jev triage; no further analysis needed
invoke.js	safe	Cleared by Jev triage; no further analysis needed
invokeMap.js	safe	Cleared by Jev triage; no further analysis needed
isArguments.js	safe	No malicious patterns detected
isArray.js	safe	Cleared by Jev triage; no further analysis needed
isArrayBuffer.js	safe	Cleared by Jev triage; no further analysis needed
isArrayLike.js	safe	Cleared by Jev triage; no further analysis needed
isArrayLikeObject.js	safe	Cleared by Jev triage; no further analysis needed
isBoolean.js	safe	Cleared by Jev triage; no further analysis needed
isBuffer.js	safe	Cleared by Jev triage; no further analysis needed
isDate.js	safe	Cleared by Jev triage; no further analysis needed
isElement.js	safe	Cleared by Jev triage; no further analysis needed
isEmpty.js	safe	Cleared by Jev triage; no further analysis needed
isEqual.js	safe	Cleared by Jev triage; no further analysis needed
isEqualWith.js	safe	Cleared by Jev triage; no further analysis needed
isError.js	safe	Cleared by Jev triage; no further analysis needed
isFinite.js	safe	Cleared by Jev triage; no further analysis needed
isFunction.js	safe	Cleared by Jev triage; no further analysis needed
isInteger.js	safe	Cleared by Jev triage; no further analysis needed
isLength.js	safe	Cleared by Jev triage; no further analysis needed
isMap.js	safe	Cleared by Jev triage; no further analysis needed
isMatch.js	safe	Cleared by Jev triage; no further analysis needed
isMatchWith.js	safe	Cleared by Jev triage; no further analysis needed
isNaN.js	safe	Cleared by Jev triage; no further analysis needed
isNative.js	safe	Cleared by Jev triage; no further analysis needed
isNil.js	safe	Cleared by Jev triage; no further analysis needed
isNull.js	safe	Cleared by Jev triage; no further analysis needed
isNumber.js	safe	Cleared by Jev triage; no further analysis needed
isObject.js	safe	Cleared by Jev triage; no further analysis needed
isObjectLike.js	safe	Cleared by Jev triage; no further analysis needed
isPlainObject.js	safe	Cleared by Jev triage; no further analysis needed
isRegExp.js	safe	Cleared by Jev triage; no further analysis needed
isSafeInteger.js	safe	Cleared by Jev triage; no further analysis needed
isSet.js	safe	Cleared by Jev triage; no further analysis needed
isString.js	safe	Cleared by Jev triage; no further analysis needed
isSymbol.js	safe	Cleared by Jev triage; no further analysis needed
isTypedArray.js	safe	Cleared by Jev triage; no further analysis needed
isUndefined.js	safe	Cleared by Jev triage; no further analysis needed
isWeakMap.js	safe	Cleared by Jev triage; no further analysis needed
isWeakSet.js	safe	Cleared by Jev triage; no further analysis needed
iteratee.js	safe	Cleared by Jev triage; no further analysis needed
join.js	safe	Cleared by Jev triage; no further analysis needed
kebabCase.js	safe	Cleared by Jev triage; no further analysis needed
keyBy.js	safe	Cleared by Jev triage; no further analysis needed
keys.js	safe	Cleared by Jev triage; no further analysis needed
keysIn.js	safe	Cleared by Jev triage; no further analysis needed
lang.js	safe	Cleared by Jev triage; no further analysis needed
last.js	safe	Cleared by Jev triage; no further analysis needed
lastIndexOf.js	safe	Cleared by Jev triage; no further analysis needed
lowerCase.js	safe	Cleared by Jev triage; no further analysis needed
lowerFirst.js	safe	Cleared by Jev triage; no further analysis needed
lt.js	safe	Cleared by Jev triage; no further analysis needed
lte.js	safe	Cleared by Jev triage; no further analysis needed
map.js	safe	Cleared by Jev triage; no further analysis needed
mapKeys.js	safe	Cleared by Jev triage; no further analysis needed
mapValues.js	safe	Cleared by Jev triage; no further analysis needed
matches.js	safe	Cleared by Jev triage; no further analysis needed
matchesProperty.js	safe	Cleared by Jev triage; no further analysis needed
math.js	safe	Cleared by Jev triage; no further analysis needed
max.js	safe	Cleared by Jev triage; no further analysis needed
maxBy.js	safe	Cleared by Jev triage; no further analysis needed
mean.js	safe	Cleared by Jev triage; no further analysis needed
meanBy.js	safe	Cleared by Jev triage; no further analysis needed
memoize.js	safe	Cleared by Jev triage; no further analysis needed
merge.js	safe	Cleared by Jev triage; no further analysis needed
mergeWith.js	safe	Cleared by Jev triage; no further analysis needed
method.js	safe	Cleared by Jev triage; no further analysis needed
methodOf.js	safe	Cleared by Jev triage; no further analysis needed
min.js	safe	No malicious patterns detected; the code is a simple lodash min utility with static requires and no dynamic execution, network, filesystem, or process activity.
minBy.js	safe	Cleared by Jev triage; no further analysis needed
mixin.js	safe	No malicious patterns detected
multiply.js	safe	Cleared by Jev triage; no further analysis needed
negate.js	safe	Cleared by Jev triage; no further analysis needed
next.js	safe	Cleared by Jev triage; no further analysis needed
noop.js	safe	Cleared by Jev triage; no further analysis needed
now.js	safe	Cleared by Jev triage; no further analysis needed
nth.js	safe	Cleared by Jev triage; no further analysis needed
nthArg.js	safe	Cleared by Jev triage; no further analysis needed
number.js	safe	Cleared by Jev triage; no further analysis needed
object.js	safe	Cleared by Jev triage; no further analysis needed
omit.js	safe	Cleared by Jev triage; no further analysis needed
omitBy.js	safe	Cleared by Jev triage; no further analysis needed
once.js	safe	Cleared by Jev triage; no further analysis needed
orderBy.js	safe	Cleared by Jev triage; no further analysis needed
over.js	safe	Cleared by Jev triage; no further analysis needed
overArgs.js	safe	Cleared by Jev triage; no further analysis needed
overEvery.js	safe	Cleared by Jev triage; no further analysis needed
overSome.js	safe	Cleared by Jev triage; no further analysis needed
pad.js	safe	Cleared by Jev triage; no further analysis needed
padEnd.js	safe	Cleared by Jev triage; no further analysis needed
padStart.js	safe	Cleared by Jev triage; no further analysis needed
parseInt.js	safe	Cleared by Jev triage; no further analysis needed
partial.js	safe	Cleared by Jev triage; no further analysis needed
partialRight.js	safe	Cleared by Jev triage; no further analysis needed
partition.js	safe	Cleared by Jev triage; no further analysis needed
pick.js	safe	Cleared by Jev triage; no further analysis needed
pickBy.js	safe	Cleared by Jev triage; no further analysis needed
plant.js	safe	Cleared by Jev triage; no further analysis needed
property.js	safe	Cleared by Jev triage; no further analysis needed
propertyOf.js	safe	Cleared by Jev triage; no further analysis needed
pull.js	safe	Cleared by Jev triage; no further analysis needed
pullAll.js	safe	Cleared by Jev triage; no further analysis needed
pullAllBy.js	safe	Cleared by Jev triage; no further analysis needed
pullAllWith.js	safe	Cleared by Jev triage; no further analysis needed
pullAt.js	safe	Cleared by Jev triage; no further analysis needed
random.js	safe	Cleared by Jev triage; no further analysis needed
range.js	safe	Cleared by Jev triage; no further analysis needed
rangeRight.js	safe	Cleared by Jev triage; no further analysis needed
rearg.js	safe	Cleared by Jev triage; no further analysis needed
reduce.js	safe	Cleared by Jev triage; no further analysis needed
reduceRight.js	safe	Cleared by Jev triage; no further analysis needed
reject.js	safe	Cleared by Jev triage; no further analysis needed
remove.js	safe	Cleared by Jev triage; no further analysis needed
repeat.js	safe	Cleared by Jev triage; no further analysis needed
replace.js	safe	Cleared by Jev triage; no further analysis needed
rest.js	safe	Cleared by Jev triage; no further analysis needed
result.js	safe	No malicious patterns detected; this is a legitimate lodash result utility implementing path resolution and function invocation.
reverse.js	safe	Cleared by Jev triage; no further analysis needed
round.js	safe	Cleared by Jev triage; no further analysis needed
sample.js	safe	Cleared by Jev triage; no further analysis needed
sampleSize.js	safe	Cleared by Jev triage; no further analysis needed
seq.js	safe	Cleared by Jev triage; no further analysis needed
set.js	safe	Cleared by Jev triage; no further analysis needed
setWith.js	safe	Cleared by Jev triage; no further analysis needed
shuffle.js	safe	Cleared by Jev triage; no further analysis needed
size.js	safe	Cleared by Jev triage; no further analysis needed
slice.js	safe	Cleared by Jev triage; no further analysis needed
snakeCase.js	safe	Cleared by Jev triage; no further analysis needed
some.js	safe	Cleared by Jev triage; no further analysis needed
sortBy.js	safe	Cleared by Jev triage; no further analysis needed
sortedIndex.js	safe	Cleared by Jev triage; no further analysis needed
sortedIndexBy.js	safe	Cleared by Jev triage; no further analysis needed
sortedIndexOf.js	safe	Cleared by Jev triage; no further analysis needed
sortedLastIndex.js	safe	Cleared by Jev triage; no further analysis needed
sortedLastIndexBy.js	safe	Cleared by Jev triage; no further analysis needed
sortedLastIndexOf.js	safe	Cleared by Jev triage; no further analysis needed
sortedUniq.js	safe	Cleared by Jev triage; no further analysis needed
sortedUniqBy.js	safe	Cleared by Jev triage; no further analysis needed
split.js	safe	Cleared by Jev triage; no further analysis needed
spread.js	safe	Cleared by Jev triage; no further analysis needed
startCase.js	safe	Cleared by Jev triage; no further analysis needed
startsWith.js	safe	Cleared by Jev triage; no further analysis needed
string.js	safe	Cleared by Jev triage; no further analysis needed
stubArray.js	safe	Cleared by Jev triage; no further analysis needed
stubFalse.js	safe	Cleared by Jev triage; no further analysis needed
stubObject.js	safe	Cleared by Jev triage; no further analysis needed
stubString.js	safe	Cleared by Jev triage; no further analysis needed
stubTrue.js	safe	Cleared by Jev triage; no further analysis needed
subtract.js	safe	Cleared by Jev triage; no further analysis needed
sum.js	safe	Cleared by Jev triage; no further analysis needed
sumBy.js	safe	Cleared by Jev triage; no further analysis needed
tail.js	safe	Cleared by Jev triage; no further analysis needed
take.js	safe	Cleared by Jev triage; no further analysis needed
takeRight.js	safe	Cleared by Jev triage; no further analysis needed
takeRightWhile.js	safe	Cleared by Jev triage; no further analysis needed
takeWhile.js	safe	Cleared by Jev triage; no further analysis needed
tap.js	safe	Cleared by Jev triage; no further analysis needed
templateSettings.js	safe	Cleared by Jev triage; no further analysis needed
throttle.js	safe	Cleared by Jev triage; no further analysis needed
thru.js	safe	Cleared by Jev triage; no further analysis needed
times.js	safe	Cleared by Jev triage; no further analysis needed
toArray.js	safe	Cleared by Jev triage; no further analysis needed
toFinite.js	safe	Cleared by Jev triage; no further analysis needed
toInteger.js	safe	Cleared by Jev triage; no further analysis needed
toIterator.js	safe	Cleared by Jev triage; no further analysis needed
toJSON.js	safe	Cleared by Jev triage; no further analysis needed
toLength.js	safe	Cleared by Jev triage; no further analysis needed
toLower.js	safe	Cleared by Jev triage; no further analysis needed
toNumber.js	safe	Cleared by Jev triage; no further analysis needed
toPairs.js	safe	Cleared by Jev triage; no further analysis needed
toPairsIn.js	safe	Cleared by Jev triage; no further analysis needed
toPath.js	safe	Cleared by Jev triage; no further analysis needed
toPlainObject.js	safe	Cleared by Jev triage; no further analysis needed
toSafeInteger.js	safe	Cleared by Jev triage; no further analysis needed
toString.js	safe	Cleared by Jev triage; no further analysis needed
toUpper.js	safe	Cleared by Jev triage; no further analysis needed
transform.js	safe	Cleared by Jev triage; no further analysis needed
trim.js	safe	Cleared by Jev triage; no further analysis needed
trimEnd.js	safe	Cleared by Jev triage; no further analysis needed
trimStart.js	safe	Cleared by Jev triage; no further analysis needed
truncate.js	safe	Cleared by Jev triage; no further analysis needed
unary.js	safe	Cleared by Jev triage; no further analysis needed
unescape.js	safe	Cleared by Jev triage; no further analysis needed
union.js	safe	Cleared by Jev triage; no further analysis needed
unionBy.js	safe	Cleared by Jev triage; no further analysis needed
unionWith.js	safe	Cleared by Jev triage; no further analysis needed
uniq.js	safe	Cleared by Jev triage; no further analysis needed
uniqBy.js	safe	Cleared by Jev triage; no further analysis needed
uniqWith.js	safe	Cleared by Jev triage; no further analysis needed
uniqueId.js	safe	Cleared by Jev triage; no further analysis needed
unset.js	safe	Cleared by Jev triage; no further analysis needed
unzip.js	safe	Cleared by Jev triage; no further analysis needed
unzipWith.js	safe	Cleared by Jev triage; no further analysis needed
update.js	safe	Cleared by Jev triage; no further analysis needed
updateWith.js	safe	Cleared by Jev triage; no further analysis needed
upperCase.js	safe	Cleared by Jev triage; no further analysis needed
upperFirst.js	safe	Cleared by Jev triage; no further analysis needed
util.js	safe	Cleared by Jev triage; no further analysis needed
value.js	safe	Cleared by Jev triage; no further analysis needed
valueOf.js	safe	Cleared by Jev triage; no further analysis needed
values.js	safe	Cleared by Jev triage; no further analysis needed
valuesIn.js	safe	Cleared by Jev triage; no further analysis needed
without.js	safe	Cleared by Jev triage; no further analysis needed
words.js	safe	Cleared by Jev triage; no further analysis needed
wrap.js	safe	Cleared by Jev triage; no further analysis needed
wrapperAt.js	safe	Cleared by Jev triage; no further analysis needed
wrapperChain.js	safe	Cleared by Jev triage; no further analysis needed
wrapperLodash.js	safe	Cleared by Jev triage; no further analysis needed
wrapperReverse.js	safe	Cleared by Jev triage; no further analysis needed
wrapperValue.js	safe	Cleared by Jev triage; no further analysis needed
xor.js	safe	Cleared by Jev triage; no further analysis needed
xorBy.js	safe	Cleared by Jev triage; no further analysis needed
xorWith.js	safe	Cleared by Jev triage; no further analysis needed
zip.js	safe	Cleared by Jev triage; no further analysis needed
zipObject.js	safe	Cleared by Jev triage; no further analysis needed
zipObjectDeep.js	safe	Cleared by Jev triage; no further analysis needed
zipWith.js	safe	Cleared by Jev triage; no further analysis needed

Affected version ranges

None of the 2 scanned versions of lodash are flagged high or critical. The latest scanned version, 4.18.1, is medium risk. Only versions we have scanned are listed; unscanned versions between them are not covered.

4.17.214.18.1

Versions	Verdict	Count	Range	Top findings
4.17.21 – 4.18.1	Needs review	2	>=4.17.21 <=4.18.1	Dynamic Code Execution (eval-like); Dynamic Code Execution

Full list, including published versions not scanned yet: version ranges API.

Scanned versions of lodash

Version	Verdict	Files	Scanned
4.18.1	Needs review	1044	Oct 4, 2026
4.17.21	Needs review	1044	Oct 4, 2026

Frequently asked questions

Is lodash safe to use?

No confirmed malware was found in lodash@4.18.1, but the review flagged 1 medium, 1 low severity findings for risky patterns worth checking before you rely on it.

Does lodash contain malware?