Summary
Togoder Security scanned the npm package lodash@4.17.21 on Oct 4, 2026. An AI review of 1044 source files produced 1 high, 2 low severity findings. The overall verdict is medium: the findings flag risky but common patterns (dynamic code, unsafe defaults, broad file or network access) rather than confirmed malware.
Findings 3
Dynamic Code Execution (eval-like)
NPS-EFAF9BB4D8F4
The template function constructs a JavaScript function body from user-supplied template strings and options, then compiles it via Function(importsKeys, sourceURL + 'return ' + source). This is the intended core behavior of lodash's _.template (a documented feature), but it is inherently a dynamic code-execution primitive. If an attacker can control the template string, options.interpolate/escape/evaluate regexes, or options.variable, they can achieve arbitrary JavaScript execution. Note the presence of the reForbiddenIdentifierChars guard which blocks characters like ()=,{}[]/ and whitespace in the variable option to prevent command injection via the function parameter list.
dynamic code execution
NPS-8B82729E1C3D
Uses Function('return this')() as a fallback to obtain the global object. While this is a common idiom in libraries like Lodash for environment detection, the 'new Function' constructor executes a string as code and can be flagged by static analyzers or CSP policies. In this specific context it is not malicious (it returns the global object), but it constitutes a dynamic code execution pattern that should be noted.
with Statement Usage
NPS-03FB6F42ABA7
When the variable option is not supplied, the compiled source is wrapped in with (obj) { ... }. This is intentional (to allow data properties as free variables) but is a known pattern that can lead to prototype pollution-style scope manipulation and makes static analysis harder. Not malicious on its own.
Files reviewed
| File | Verdict | What the reviewer saw |
|---|---|---|
| _root.js | medium | This appears to be a standard Lodash-style global object detection helper with no exfiltration, credential harvesting, or network activity, but it uses the Function constructor which is a dynamic code execution pattern worth noting. |
| template.js | medium | This is the official lodash _.template implementation, which intentionally compiles templates into functions via new Function; the dynamic code execution is a documented, guarded feature rather than an injected backdoor, but it carries inherent RCE risk if template inputs are attacker-controlled. |
| _DataView.js | safe | Cleared by Jev triage; no further analysis needed |
| _Hash.js | safe | Cleared by Jev triage; no further analysis needed |
| _LazyWrapper.js | safe | Cleared by Jev triage; no further analysis needed |
| _ListCache.js | safe | Cleared by Jev triage; no further analysis needed |
| _LodashWrapper.js | safe | Cleared by Jev triage; no further analysis needed |
| _Map.js | safe | Cleared by Jev triage; no further analysis needed |
| _MapCache.js | safe | Cleared by Jev triage; no further analysis needed |
| _Promise.js | safe | Cleared by Jev triage; no further analysis needed |
| _Set.js | safe | Cleared by Jev triage; no further analysis needed |
| _SetCache.js | safe | Cleared by Jev triage; no further analysis needed |
| _Stack.js | safe | Cleared by Jev triage; no further analysis needed |
| _Symbol.js | safe | Cleared by Jev triage; no further analysis needed |
| _Uint8Array.js | safe | Cleared by Jev triage; no further analysis needed |
| _WeakMap.js | safe | Cleared by Jev triage; no further analysis needed |
| _apply.js | safe | Cleared by Jev triage; no further analysis needed |
| _arrayAggregator.js | safe | Cleared by Jev triage; no further analysis needed |
| _arrayEach.js | safe | Cleared by Jev triage; no further analysis needed |
| _arrayEachRight.js | safe | Cleared by Jev triage; no further analysis needed |
| _arrayEvery.js | safe | Cleared by Jev triage; no further analysis needed |
| _arrayFilter.js | safe | Cleared by Jev triage; no further analysis needed |
| _arrayIncludes.js | safe | Cleared by Jev triage; no further analysis needed |
| _arrayIncludesWith.js | safe | Cleared by Jev triage; no further analysis needed |
| _arrayLikeKeys.js | safe | Cleared by Jev triage; no further analysis needed |
Show 1019 more files
| File | Verdict | What the reviewer saw |
|---|---|---|
| _arrayMap.js | safe | Cleared by Jev triage; no further analysis needed |
| _arrayPush.js | safe | Cleared by Jev triage; no further analysis needed |
| _arrayReduce.js | safe | Cleared by Jev triage; no further analysis needed |
| _arrayReduceRight.js | safe | Cleared by Jev triage; no further analysis needed |
| _arraySample.js | safe | Cleared by Jev triage; no further analysis needed |
| _arraySampleSize.js | safe | Cleared by Jev triage; no further analysis needed |
| _arrayShuffle.js | safe | Cleared by Jev triage; no further analysis needed |
| _arraySome.js | safe | Cleared by Jev triage; no further analysis needed |
| _asciiSize.js | safe | Cleared by Jev triage; no further analysis needed |
| _asciiToArray.js | safe | Cleared by Jev triage; no further analysis needed |
| _asciiWords.js | safe | Cleared by Jev triage; no further analysis needed |
| _assignMergeValue.js | safe | Cleared by Jev triage; no further analysis needed |
| _assignValue.js | safe | Cleared by Jev triage; no further analysis needed |
| _assocIndexOf.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseAggregator.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseAssign.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseAssignIn.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseAssignValue.js | safe | No malicious patterns detected; the code is a standard Lodash internal helper for safe property assignment. |
| _baseAt.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseClamp.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseClone.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseConforms.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseConformsTo.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseCreate.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseDelay.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseDifference.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseEach.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseEachRight.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseEvery.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseExtremum.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseFill.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseFilter.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseFindIndex.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseFindKey.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseFlatten.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseFor.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseForOwn.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseForOwnRight.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseForRight.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseFunctions.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseGet.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseGetAllKeys.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseGetTag.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseGt.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseHas.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseHasIn.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseInRange.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseIndexOf.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseIndexOfWith.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseIntersection.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseInverter.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseInvoke.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseIsArguments.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseIsArrayBuffer.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseIsDate.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseIsEqual.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseIsEqualDeep.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseIsMap.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseIsMatch.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseIsNaN.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseIsNative.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseIsRegExp.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseIsSet.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseIsTypedArray.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseIteratee.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseKeys.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseKeysIn.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseLodash.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseLt.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseMap.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseMatches.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseMatchesProperty.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseMean.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseMerge.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseMergeDeep.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseNth.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseOrderBy.js | safe | Cleared by Jev triage; no further analysis needed |
| _basePick.js | safe | Cleared by Jev triage; no further analysis needed |
| _basePickBy.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseProperty.js | safe | Cleared by Jev triage; no further analysis needed |
| _basePropertyDeep.js | safe | Cleared by Jev triage; no further analysis needed |
| _basePropertyOf.js | safe | Cleared by Jev triage; no further analysis needed |
| _basePullAll.js | safe | Cleared by Jev triage; no further analysis needed |
| _basePullAt.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseRandom.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseRange.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseReduce.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseRepeat.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseRest.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseSample.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseSampleSize.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseSet.js | safe | No malicious patterns detected |
| _baseSetData.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseSetToString.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseShuffle.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseSlice.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseSome.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseSortBy.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseSortedIndex.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseSortedIndexBy.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseSortedUniq.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseSum.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseTimes.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseToNumber.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseToPairs.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseToString.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseTrim.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseUnary.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseUniq.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseUnset.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseUpdate.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseValues.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseWhile.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseWrapperValue.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseXor.js | safe | Cleared by Jev triage; no further analysis needed |
| _baseZipObject.js | safe | Cleared by Jev triage; no further analysis needed |
| _cacheHas.js | safe | Cleared by Jev triage; no further analysis needed |
| _castArrayLikeObject.js | safe | Cleared by Jev triage; no further analysis needed |
| _castFunction.js | safe | Cleared by Jev triage; no further analysis needed |
| _castPath.js | safe | Cleared by Jev triage; no further analysis needed |
| _castRest.js | safe | Cleared by Jev triage; no further analysis needed |
| _castSlice.js | safe | Cleared by Jev triage; no further analysis needed |
| _charsEndIndex.js | safe | Cleared by Jev triage; no further analysis needed |
| _charsStartIndex.js | safe | Cleared by Jev triage; no further analysis needed |
| _cloneArrayBuffer.js | safe | Cleared by Jev triage; no further analysis needed |
| _cloneBuffer.js | safe | Cleared by Jev triage; no further analysis needed |
| _cloneDataView.js | safe | Cleared by Jev triage; no further analysis needed |
| _cloneRegExp.js | safe | Cleared by Jev triage; no further analysis needed |
| _cloneSymbol.js | safe | Cleared by Jev triage; no further analysis needed |
| _cloneTypedArray.js | safe | Cleared by Jev triage; no further analysis needed |
| _compareAscending.js | safe | Cleared by Jev triage; no further analysis needed |
| _compareMultiple.js | safe | Cleared by Jev triage; no further analysis needed |
| _composeArgs.js | safe | Cleared by Jev triage; no further analysis needed |
| _composeArgsRight.js | safe | Cleared by Jev triage; no further analysis needed |
| _copyArray.js | safe | Cleared by Jev triage; no further analysis needed |
| _copyObject.js | safe | Cleared by Jev triage; no further analysis needed |
| _copySymbols.js | safe | Cleared by Jev triage; no further analysis needed |
| _copySymbolsIn.js | safe | Cleared by Jev triage; no further analysis needed |
| _coreJsData.js | safe | Cleared by Jev triage; no further analysis needed |
| _countHolders.js | safe | Cleared by Jev triage; no further analysis needed |
| _createAggregator.js | safe | Cleared by Jev triage; no further analysis needed |
| _createAssigner.js | safe | Cleared by Jev triage; no further analysis needed |
| _createBaseEach.js | safe | Cleared by Jev triage; no further analysis needed |
| _createBaseFor.js | safe | Cleared by Jev triage; no further analysis needed |
| _createBind.js | safe | Cleared by Jev triage; no further analysis needed |
| _createCaseFirst.js | safe | Cleared by Jev triage; no further analysis needed |
| _createCompounder.js | safe | Cleared by Jev triage; no further analysis needed |
| _createCtor.js | safe | Cleared by Jev triage; no further analysis needed |
| _createCurry.js | safe | Cleared by Jev triage; no further analysis needed |
| _createFind.js | safe | Cleared by Jev triage; no further analysis needed |
| _createFlow.js | safe | Cleared by Jev triage; no further analysis needed |
| _createHybrid.js | safe | Cleared by Jev triage; no further analysis needed |
| _createInverter.js | safe | Cleared by Jev triage; no further analysis needed |
| _createMathOperation.js | safe | Cleared by Jev triage; no further analysis needed |
| _createOver.js | safe | Cleared by Jev triage; no further analysis needed |
| _createPadding.js | safe | Cleared by Jev triage; no further analysis needed |
| _createPartial.js | safe | Cleared by Jev triage; no further analysis needed |
| _createRange.js | safe | Cleared by Jev triage; no further analysis needed |
| _createRecurry.js | safe | Cleared by Jev triage; no further analysis needed |
| _createRelationalOperation.js | safe | Cleared by Jev triage; no further analysis needed |
| _createRound.js | safe | Cleared by Jev triage; no further analysis needed |
| _createSet.js | safe | No malicious patterns detected |
| _createToPairs.js | safe | Cleared by Jev triage; no further analysis needed |
| _createWrap.js | safe | Cleared by Jev triage; no further analysis needed |
| _customDefaultsAssignIn.js | safe | Cleared by Jev triage; no further analysis needed |
| _customDefaultsMerge.js | safe | Cleared by Jev triage; no further analysis needed |
| _customOmitClone.js | safe | Cleared by Jev triage; no further analysis needed |
| _deburrLetter.js | safe | Cleared by Jev triage; no further analysis needed |
| _defineProperty.js | safe | No malicious patterns detected; this is a standard lodash utility module that safely retrieves Object.defineProperty. |
| _equalArrays.js | safe | Cleared by Jev triage; no further analysis needed |
| _equalByTag.js | safe | Cleared by Jev triage; no further analysis needed |
| _equalObjects.js | safe | Cleared by Jev triage; no further analysis needed |
| _escapeHtmlChar.js | safe | Cleared by Jev triage; no further analysis needed |
| _escapeStringChar.js | safe | Cleared by Jev triage; no further analysis needed |
| _flatRest.js | safe | Cleared by Jev triage; no further analysis needed |
| _freeGlobal.js | safe | Cleared by Jev triage; no further analysis needed |
| _getAllKeys.js | safe | Cleared by Jev triage; no further analysis needed |
| _getAllKeysIn.js | safe | Cleared by Jev triage; no further analysis needed |
| _getData.js | safe | Cleared by Jev triage; no further analysis needed |
| _getFuncName.js | safe | Cleared by Jev triage; no further analysis needed |
| _getHolder.js | safe | Cleared by Jev triage; no further analysis needed |
| _getMapData.js | safe | Cleared by Jev triage; no further analysis needed |
| _getMatchData.js | safe | Cleared by Jev triage; no further analysis needed |
| _getNative.js | safe | Cleared by Jev triage; no further analysis needed |
| _getPrototype.js | safe | Cleared by Jev triage; no further analysis needed |
| _getRawTag.js | safe | Cleared by Jev triage; no further analysis needed |
| _getSymbols.js | safe | Cleared by Jev triage; no further analysis needed |
| _getSymbolsIn.js | safe | Cleared by Jev triage; no further analysis needed |
| _getTag.js | safe | No malicious patterns detected; this is a legitimate lodash internal utility for determining object toStringTag values. |
| _getValue.js | safe | Cleared by Jev triage; no further analysis needed |
| _getView.js | safe | Cleared by Jev triage; no further analysis needed |
| _getWrapDetails.js | safe | Cleared by Jev triage; no further analysis needed |
| _hasPath.js | safe | Cleared by Jev triage; no further analysis needed |
| _hasUnicode.js | safe | This file is a benign lodash utility for detecting Unicode characters in strings and contains no malicious patterns. |
| _hasUnicodeWord.js | safe | Cleared by Jev triage; no further analysis needed |
| _hashClear.js | safe | Cleared by Jev triage; no further analysis needed |
| _hashDelete.js | safe | Cleared by Jev triage; no further analysis needed |
| _hashGet.js | safe | Cleared by Jev triage; no further analysis needed |
| _hashHas.js | safe | Cleared by Jev triage; no further analysis needed |
| _hashSet.js | safe | Cleared by Jev triage; no further analysis needed |
| _initCloneArray.js | safe | Cleared by Jev triage; no further analysis needed |
| _initCloneByTag.js | safe | Cleared by Jev triage; no further analysis needed |
| _initCloneObject.js | safe | Cleared by Jev triage; no further analysis needed |
| _insertWrapDetails.js | safe | Cleared by Jev triage; no further analysis needed |
| _isFlattenable.js | safe | Cleared by Jev triage; no further analysis needed |
| _isIndex.js | safe | Cleared by Jev triage; no further analysis needed |
| _isIterateeCall.js | safe | Cleared by Jev triage; no further analysis needed |
| _isKey.js | safe | Cleared by Jev triage; no further analysis needed |
| _isKeyable.js | safe | Cleared by Jev triage; no further analysis needed |
| _isLaziable.js | safe | Cleared by Jev triage; no further analysis needed |
| _isMaskable.js | safe | Cleared by Jev triage; no further analysis needed |
| _isMasked.js | safe | Cleared by Jev triage; no further analysis needed |
| _isPrototype.js | safe | Cleared by Jev triage; no further analysis needed |
| _isStrictComparable.js | safe | Cleared by Jev triage; no further analysis needed |
| _iteratorToArray.js | safe | Cleared by Jev triage; no further analysis needed |
| _lazyClone.js | safe | Cleared by Jev triage; no further analysis needed |
| _lazyReverse.js | safe | Cleared by Jev triage; no further analysis needed |
| _lazyValue.js | safe | Cleared by Jev triage; no further analysis needed |
| _listCacheClear.js | safe | Cleared by Jev triage; no further analysis needed |
| _listCacheDelete.js | safe | Cleared by Jev triage; no further analysis needed |
| _listCacheGet.js | safe | Cleared by Jev triage; no further analysis needed |
| _listCacheHas.js | safe | Cleared by Jev triage; no further analysis needed |
| _listCacheSet.js | safe | Cleared by Jev triage; no further analysis needed |
| _mapCacheClear.js | safe | Cleared by Jev triage; no further analysis needed |
| _mapCacheDelete.js | safe | Cleared by Jev triage; no further analysis needed |
| _mapCacheGet.js | safe | Cleared by Jev triage; no further analysis needed |
| _mapCacheHas.js | safe | Cleared by Jev triage; no further analysis needed |
| _mapCacheSet.js | safe | Cleared by Jev triage; no further analysis needed |
| _mapToArray.js | safe | Cleared by Jev triage; no further analysis needed |
| _matchesStrictComparable.js | safe | Cleared by Jev triage; no further analysis needed |
| _memoizeCapped.js | safe | Cleared by Jev triage; no further analysis needed |
| _mergeData.js | safe | Cleared by Jev triage; no further analysis needed |
| _metaMap.js | safe | Cleared by Jev triage; no further analysis needed |
| _nativeCreate.js | safe | Cleared by Jev triage; no further analysis needed |
| _nativeKeys.js | safe | Cleared by Jev triage; no further analysis needed |
| _nativeKeysIn.js | safe | Cleared by Jev triage; no further analysis needed |
| _nodeUtil.js | safe | No malicious patterns detected; this is standard Lodash internal Node.js utility detection code. |
| _objectToString.js | safe | Cleared by Jev triage; no further analysis needed |
| _overArg.js | safe | Cleared by Jev triage; no further analysis needed |
| _overRest.js | safe | Cleared by Jev triage; no further analysis needed |
| _parent.js | safe | Cleared by Jev triage; no further analysis needed |
| _reEscape.js | safe | Cleared by Jev triage; no further analysis needed |
| _reEvaluate.js | safe | Cleared by Jev triage; no further analysis needed |
| _reInterpolate.js | safe | Cleared by Jev triage; no further analysis needed |
| _realNames.js | safe | Cleared by Jev triage; no further analysis needed |
| _reorder.js | safe | Cleared by Jev triage; no further analysis needed |
| _replaceHolders.js | safe | Cleared by Jev triage; no further analysis needed |
| _safeGet.js | safe | Cleared by Jev triage; no further analysis needed |
| _setCacheAdd.js | safe | Cleared by Jev triage; no further analysis needed |
| _setCacheHas.js | safe | Cleared by Jev triage; no further analysis needed |
| _setData.js | safe | Cleared by Jev triage; no further analysis needed |
| _setToArray.js | safe | Cleared by Jev triage; no further analysis needed |
| _setToPairs.js | safe | Cleared by Jev triage; no further analysis needed |
| _setToString.js | safe | Cleared by Jev triage; no further analysis needed |
| _setWrapToString.js | safe | Cleared by Jev triage; no further analysis needed |
| _shortOut.js | safe | Cleared by Jev triage; no further analysis needed |
| _shuffleSelf.js | safe | Cleared by Jev triage; no further analysis needed |
| _stackClear.js | safe | Cleared by Jev triage; no further analysis needed |
| _stackDelete.js | safe | Cleared by Jev triage; no further analysis needed |
| _stackGet.js | safe | Cleared by Jev triage; no further analysis needed |
| _stackHas.js | safe | Cleared by Jev triage; no further analysis needed |
| _stackSet.js | safe | Cleared by Jev triage; no further analysis needed |
| _strictIndexOf.js | safe | Cleared by Jev triage; no further analysis needed |
| _strictLastIndexOf.js | safe | Cleared by Jev triage; no further analysis needed |
| _stringSize.js | safe | Cleared by Jev triage; no further analysis needed |
| _stringToArray.js | safe | Cleared by Jev triage; no further analysis needed |
| _stringToPath.js | safe | Cleared by Jev triage; no further analysis needed |
| _toKey.js | safe | Cleared by Jev triage; no further analysis needed |
| _toSource.js | safe | Cleared by Jev triage; no further analysis needed |
| _trimmedEndIndex.js | safe | Cleared by Jev triage; no further analysis needed |
| _unescapeHtmlChar.js | safe | Cleared by Jev triage; no further analysis needed |
| _unicodeSize.js | safe | No malicious patterns detected |
| _unicodeToArray.js | safe | No malicious patterns detected |
| _unicodeWords.js | safe | No malicious patterns detected; the code is a pure Unicode word-splitting regex utility with no network, filesystem, process, or dynamic execution behavior. |
| _updateWrapDetails.js | safe | Cleared by Jev triage; no further analysis needed |
| _wrapperClone.js | safe | Cleared by Jev triage; no further analysis needed |
| add.js | safe | Cleared by Jev triage; no further analysis needed |
| after.js | safe | Cleared by Jev triage; no further analysis needed |
| array.js | safe | Cleared by Jev triage; no further analysis needed |
| ary.js | safe | Cleared by Jev triage; no further analysis needed |
| assign.js | safe | Cleared by Jev triage; no further analysis needed |
| assignIn.js | safe | Cleared by Jev triage; no further analysis needed |
| assignInWith.js | safe | Cleared by Jev triage; no further analysis needed |
| assignWith.js | safe | Cleared by Jev triage; no further analysis needed |
| at.js | safe | Cleared by Jev triage; no further analysis needed |
| attempt.js | safe | Cleared by Jev triage; no further analysis needed |
| before.js | safe | Cleared by Jev triage; no further analysis needed |
| bind.js | safe | Cleared by Jev triage; no further analysis needed |
| bindAll.js | safe | Cleared by Jev triage; no further analysis needed |
| bindKey.js | safe | Cleared by Jev triage; no further analysis needed |
| camelCase.js | safe | Cleared by Jev triage; no further analysis needed |
| capitalize.js | safe | Cleared by Jev triage; no further analysis needed |
| castArray.js | safe | Cleared by Jev triage; no further analysis needed |
| ceil.js | safe | Cleared by Jev triage; no further analysis needed |
| chain.js | safe | Cleared by Jev triage; no further analysis needed |
| chunk.js | safe | Cleared by Jev triage; no further analysis needed |
| clamp.js | safe | Cleared by Jev triage; no further analysis needed |
| clone.js | safe | Cleared by Jev triage; no further analysis needed |
| cloneDeep.js | safe | Cleared by Jev triage; no further analysis needed |
| cloneDeepWith.js | safe | Cleared by Jev triage; no further analysis needed |
| cloneWith.js | safe | Cleared by Jev triage; no further analysis needed |
| collection.js | safe | Cleared by Jev triage; no further analysis needed |
| commit.js | safe | Cleared by Jev triage; no further analysis needed |
| compact.js | safe | Cleared by Jev triage; no further analysis needed |
| concat.js | safe | Cleared by Jev triage; no further analysis needed |
| cond.js | safe | Cleared by Jev triage; no further analysis needed |
| conforms.js | safe | Cleared by Jev triage; no further analysis needed |
| conformsTo.js | safe | Cleared by Jev triage; no further analysis needed |
| constant.js | safe | Cleared by Jev triage; no further analysis needed |
| countBy.js | safe | Cleared by Jev triage; no further analysis needed |
| create.js | safe | Cleared by Jev triage; no further analysis needed |
| curry.js | safe | Cleared by Jev triage; no further analysis needed |
| curryRight.js | safe | Cleared by Jev triage; no further analysis needed |
| date.js | safe | Cleared by Jev triage; no further analysis needed |
| debounce.js | safe | Cleared by Jev triage; no further analysis needed |
| deburr.js | safe | Cleared by Jev triage; no further analysis needed |
| defaultTo.js | safe | Cleared by Jev triage; no further analysis needed |
| defaults.js | safe | Cleared by Jev triage; no further analysis needed |
| defaultsDeep.js | safe | Cleared by Jev triage; no further analysis needed |
| defer.js | safe | Cleared by Jev triage; no further analysis needed |
| delay.js | safe | Cleared by Jev triage; no further analysis needed |
| difference.js | safe | Cleared by Jev triage; no further analysis needed |
| differenceBy.js | safe | Cleared by Jev triage; no further analysis needed |
| differenceWith.js | safe | Cleared by Jev triage; no further analysis needed |
| divide.js | safe | Cleared by Jev triage; no further analysis needed |
| drop.js | safe | Cleared by Jev triage; no further analysis needed |
| dropRight.js | safe | Cleared by Jev triage; no further analysis needed |
| dropRightWhile.js | safe | Cleared by Jev triage; no further analysis needed |
| dropWhile.js | safe | Cleared by Jev triage; no further analysis needed |
| each.js | safe | Cleared by Jev triage; no further analysis needed |
| eachRight.js | safe | Cleared by Jev triage; no further analysis needed |
| endsWith.js | safe | Cleared by Jev triage; no further analysis needed |
| entries.js | safe | Cleared by Jev triage; no further analysis needed |
| entriesIn.js | safe | Cleared by Jev triage; no further analysis needed |
| eq.js | safe | Cleared by Jev triage; no further analysis needed |
| escape.js | safe | Cleared by Jev triage; no further analysis needed |
| escapeRegExp.js | safe | Cleared by Jev triage; no further analysis needed |
| every.js | safe | Cleared by Jev triage; no further analysis needed |
| extend.js | safe | Cleared by Jev triage; no further analysis needed |
| extendWith.js | safe | Cleared by Jev triage; no further analysis needed |
| fill.js | safe | Cleared by Jev triage; no further analysis needed |
| filter.js | safe | Cleared by Jev triage; no further analysis needed |
| find.js | safe | Cleared by Jev triage; no further analysis needed |
| findIndex.js | safe | Cleared by Jev triage; no further analysis needed |
| findKey.js | safe | Cleared by Jev triage; no further analysis needed |
| findLast.js | safe | Cleared by Jev triage; no further analysis needed |
| findLastIndex.js | safe | Cleared by Jev triage; no further analysis needed |
| findLastKey.js | safe | Cleared by Jev triage; no further analysis needed |
| first.js | safe | Cleared by Jev triage; no further analysis needed |
| flatMap.js | safe | Cleared by Jev triage; no further analysis needed |
| flatMapDeep.js | safe | Cleared by Jev triage; no further analysis needed |
| flatMapDepth.js | safe | Cleared by Jev triage; no further analysis needed |
| flatten.js | safe | Cleared by Jev triage; no further analysis needed |
| flattenDeep.js | safe | Cleared by Jev triage; no further analysis needed |
| flattenDepth.js | safe | Cleared by Jev triage; no further analysis needed |
| flip.js | safe | Cleared by Jev triage; no further analysis needed |
| floor.js | safe | Cleared by Jev triage; no further analysis needed |
| flow.js | safe | Cleared by Jev triage; no further analysis needed |
| flowRight.js | safe | Cleared by Jev triage; no further analysis needed |
| forEach.js | safe | Cleared by Jev triage; no further analysis needed |
| forEachRight.js | safe | Cleared by Jev triage; no further analysis needed |
| forIn.js | safe | Cleared by Jev triage; no further analysis needed |
| forInRight.js | safe | Cleared by Jev triage; no further analysis needed |
| forOwn.js | safe | Cleared by Jev triage; no further analysis needed |
| forOwnRight.js | safe | Cleared by Jev triage; no further analysis needed |
| fp.js | safe | No malicious patterns detected; the file simply re-exports a functional programming variant of lodash with no red-flag behavior. |
| fp/F.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/T.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/__.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/_baseConvert.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/_convertBrowser.js | safe | The file is a legitimate part of the lodash library's functional programming module and contains no malicious patterns or suspicious behavior. |
| fp/_falseOptions.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/_mapping.js | safe | No malicious patterns detected; the file is a pure data mapping module with no executable or network logic. |
| fp/_util.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/add.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/after.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/all.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/allPass.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/always.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/any.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/anyPass.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/apply.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/array.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/ary.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/assign.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/assignAll.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/assignAllWith.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/assignIn.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/assignInAll.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/assignInAllWith.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/assignInWith.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/assignWith.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/assoc.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/assocPath.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/at.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/attempt.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/before.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/bind.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/bindAll.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/bindKey.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/camelCase.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/capitalize.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/castArray.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/ceil.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/chain.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/chunk.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/clamp.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/clone.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/cloneDeep.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/cloneDeepWith.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/cloneWith.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/collection.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/commit.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/compact.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/complement.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/compose.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/concat.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/cond.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/conforms.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/conformsTo.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/constant.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/contains.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/convert.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/countBy.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/create.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/curry.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/curryN.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/curryRight.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/curryRightN.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/date.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/debounce.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/deburr.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/defaultTo.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/defaults.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/defaultsAll.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/defaultsDeep.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/defaultsDeepAll.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/defer.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/delay.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/difference.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/differenceBy.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/differenceWith.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/dissoc.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/dissocPath.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/divide.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/drop.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/dropLast.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/dropLastWhile.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/dropRight.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/dropRightWhile.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/dropWhile.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/each.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/eachRight.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/endsWith.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/entries.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/entriesIn.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/eq.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/equals.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/escape.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/escapeRegExp.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/every.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/extend.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/extendAll.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/extendAllWith.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/extendWith.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/fill.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/filter.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/find.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/findFrom.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/findIndex.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/findIndexFrom.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/findKey.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/findLast.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/findLastFrom.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/findLastIndex.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/findLastIndexFrom.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/findLastKey.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/first.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/flatMap.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/flatMapDeep.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/flatMapDepth.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/flatten.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/flattenDeep.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/flattenDepth.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/flip.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/floor.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/flow.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/flowRight.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/forEach.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/forEachRight.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/forIn.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/forInRight.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/forOwn.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/forOwnRight.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/fromPairs.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/function.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/functions.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/functionsIn.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/get.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/getOr.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/groupBy.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/gt.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/gte.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/has.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/hasIn.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/head.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/identical.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/identity.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/inRange.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/includes.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/includesFrom.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/indexBy.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/indexOf.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/indexOfFrom.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/init.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/initial.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/intersection.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/intersectionBy.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/intersectionWith.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/invert.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/invertBy.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/invertObj.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/invoke.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/invokeArgs.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/invokeArgsMap.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/invokeMap.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isArguments.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isArray.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isArrayBuffer.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isArrayLike.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isArrayLikeObject.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isBoolean.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isBuffer.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isDate.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isElement.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isEmpty.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isEqual.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isEqualWith.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isError.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isFinite.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isFunction.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isInteger.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isLength.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isMap.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isMatch.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isMatchWith.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isNaN.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isNative.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isNil.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isNull.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isNumber.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isObject.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isObjectLike.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isPlainObject.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isRegExp.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isSafeInteger.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isSet.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isString.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isSymbol.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isTypedArray.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isUndefined.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isWeakMap.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/isWeakSet.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/iteratee.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/join.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/juxt.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/kebabCase.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/keyBy.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/keys.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/keysIn.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/lang.js | safe | No malicious patterns detected; the file is a simple re-export wrapper for lodash-style utilities. |
| fp/last.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/lastIndexOf.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/lastIndexOfFrom.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/lowerCase.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/lowerFirst.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/lt.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/lte.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/map.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/mapKeys.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/mapValues.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/matches.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/matchesProperty.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/math.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/max.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/maxBy.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/mean.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/meanBy.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/memoize.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/merge.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/mergeAll.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/mergeAllWith.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/mergeWith.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/method.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/methodOf.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/min.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/minBy.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/mixin.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/multiply.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/nAry.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/negate.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/next.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/noop.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/now.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/nth.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/nthArg.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/number.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/object.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/omit.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/omitAll.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/omitBy.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/once.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/orderBy.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/over.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/overArgs.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/overEvery.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/overSome.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/pad.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/padChars.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/padCharsEnd.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/padCharsStart.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/padEnd.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/padStart.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/parseInt.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/partial.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/partialRight.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/partition.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/path.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/pathEq.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/pathOr.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/paths.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/pick.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/pickAll.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/pickBy.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/pipe.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/placeholder.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/plant.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/pluck.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/prop.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/propEq.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/propOr.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/property.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/propertyOf.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/props.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/pull.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/pullAll.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/pullAllBy.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/pullAllWith.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/pullAt.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/random.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/range.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/rangeRight.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/rangeStep.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/rangeStepRight.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/rearg.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/reduce.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/reduceRight.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/reject.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/remove.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/repeat.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/replace.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/rest.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/restFrom.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/result.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/reverse.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/round.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/sample.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/sampleSize.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/seq.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/set.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/setWith.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/shuffle.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/size.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/slice.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/snakeCase.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/some.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/sortBy.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/sortedIndex.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/sortedIndexBy.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/sortedIndexOf.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/sortedLastIndex.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/sortedLastIndexBy.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/sortedLastIndexOf.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/sortedUniq.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/sortedUniqBy.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/split.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/spread.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/spreadFrom.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/startCase.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/startsWith.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/string.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/stubArray.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/stubFalse.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/stubObject.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/stubString.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/stubTrue.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/subtract.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/sum.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/sumBy.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/symmetricDifference.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/symmetricDifferenceBy.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/symmetricDifferenceWith.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/tail.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/take.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/takeLast.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/takeLastWhile.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/takeRight.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/takeRightWhile.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/takeWhile.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/tap.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/template.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/templateSettings.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/throttle.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/thru.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/times.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/toArray.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/toFinite.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/toInteger.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/toIterator.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/toJSON.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/toLength.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/toLower.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/toNumber.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/toPairs.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/toPairsIn.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/toPath.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/toPlainObject.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/toSafeInteger.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/toString.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/toUpper.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/transform.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/trim.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/trimChars.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/trimCharsEnd.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/trimCharsStart.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/trimEnd.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/trimStart.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/truncate.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/unapply.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/unary.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/unescape.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/union.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/unionBy.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/unionWith.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/uniq.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/uniqBy.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/uniqWith.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/uniqueId.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/unnest.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/unset.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/unzip.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/unzipWith.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/update.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/updateWith.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/upperCase.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/upperFirst.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/useWith.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/util.js | safe | This 2-line module simply re-exports a converted version of the parent util module; no malicious patterns detected. |
| fp/value.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/valueOf.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/values.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/valuesIn.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/where.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/whereEq.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/without.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/words.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/wrap.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/wrapperAt.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/wrapperChain.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/wrapperLodash.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/wrapperReverse.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/wrapperValue.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/xor.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/xorBy.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/xorWith.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/zip.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/zipAll.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/zipObj.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/zipObject.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/zipObjectDeep.js | safe | Cleared by Jev triage; no further analysis needed |
| fp/zipWith.js | safe | Cleared by Jev triage; no further analysis needed |
| fromPairs.js | safe | Cleared by Jev triage; no further analysis needed |
| function.js | safe | Cleared by Jev triage; no further analysis needed |
| functions.js | safe | Cleared by Jev triage; no further analysis needed |
| functionsIn.js | safe | Cleared by Jev triage; no further analysis needed |
| get.js | safe | Cleared by Jev triage; no further analysis needed |
| groupBy.js | safe | Cleared by Jev triage; no further analysis needed |
| gt.js | safe | Cleared by Jev triage; no further analysis needed |
| gte.js | safe | Cleared by Jev triage; no further analysis needed |
| has.js | safe | Cleared by Jev triage; no further analysis needed |
| hasIn.js | safe | Cleared by Jev triage; no further analysis needed |
| head.js | safe | Cleared by Jev triage; no further analysis needed |
| identity.js | safe | Cleared by Jev triage; no further analysis needed |
| inRange.js | safe | Cleared by Jev triage; no further analysis needed |
| includes.js | safe | Cleared by Jev triage; no further analysis needed |
| index.js | safe | Cleared by Jev triage; no further analysis needed |
| indexOf.js | safe | Cleared by Jev triage; no further analysis needed |
| initial.js | safe | Cleared by Jev triage; no further analysis needed |
| intersection.js | safe | Cleared by Jev triage; no further analysis needed |
| intersectionBy.js | safe | Cleared by Jev triage; no further analysis needed |
| intersectionWith.js | safe | Cleared by Jev triage; no further analysis needed |
| invert.js | safe | Cleared by Jev triage; no further analysis needed |
| invertBy.js | safe | Cleared by Jev triage; no further analysis needed |
| invoke.js | safe | Cleared by Jev triage; no further analysis needed |
| invokeMap.js | safe | Cleared by Jev triage; no further analysis needed |
| isArguments.js | safe | No malicious patterns detected |
| isArray.js | safe | Cleared by Jev triage; no further analysis needed |
| isArrayBuffer.js | safe | Cleared by Jev triage; no further analysis needed |
| isArrayLike.js | safe | Cleared by Jev triage; no further analysis needed |
| isArrayLikeObject.js | safe | Cleared by Jev triage; no further analysis needed |
| isBoolean.js | safe | Cleared by Jev triage; no further analysis needed |
| isBuffer.js | safe | Cleared by Jev triage; no further analysis needed |
| isDate.js | safe | Cleared by Jev triage; no further analysis needed |
| isElement.js | safe | Cleared by Jev triage; no further analysis needed |
| isEmpty.js | safe | Cleared by Jev triage; no further analysis needed |
| isEqual.js | safe | Cleared by Jev triage; no further analysis needed |
| isEqualWith.js | safe | Cleared by Jev triage; no further analysis needed |
| isError.js | safe | Cleared by Jev triage; no further analysis needed |
| isFinite.js | safe | Cleared by Jev triage; no further analysis needed |
| isFunction.js | safe | Cleared by Jev triage; no further analysis needed |
| isInteger.js | safe | Cleared by Jev triage; no further analysis needed |
| isLength.js | safe | Cleared by Jev triage; no further analysis needed |
| isMap.js | safe | Cleared by Jev triage; no further analysis needed |
| isMatch.js | safe | Cleared by Jev triage; no further analysis needed |
| isMatchWith.js | safe | Cleared by Jev triage; no further analysis needed |
| isNaN.js | safe | Cleared by Jev triage; no further analysis needed |
| isNative.js | safe | Cleared by Jev triage; no further analysis needed |
| isNil.js | safe | Cleared by Jev triage; no further analysis needed |
| isNull.js | safe | Cleared by Jev triage; no further analysis needed |
| isNumber.js | safe | Cleared by Jev triage; no further analysis needed |
| isObject.js | safe | Cleared by Jev triage; no further analysis needed |
| isObjectLike.js | safe | Cleared by Jev triage; no further analysis needed |
| isPlainObject.js | safe | Cleared by Jev triage; no further analysis needed |
| isRegExp.js | safe | Cleared by Jev triage; no further analysis needed |
| isSafeInteger.js | safe | Cleared by Jev triage; no further analysis needed |
| isSet.js | safe | Cleared by Jev triage; no further analysis needed |
| isString.js | safe | Cleared by Jev triage; no further analysis needed |
| isSymbol.js | safe | Cleared by Jev triage; no further analysis needed |
| isTypedArray.js | safe | Cleared by Jev triage; no further analysis needed |
| isUndefined.js | safe | Cleared by Jev triage; no further analysis needed |
| isWeakMap.js | safe | Cleared by Jev triage; no further analysis needed |
| isWeakSet.js | safe | Cleared by Jev triage; no further analysis needed |
| iteratee.js | safe | Cleared by Jev triage; no further analysis needed |
| join.js | safe | Cleared by Jev triage; no further analysis needed |
| kebabCase.js | safe | Cleared by Jev triage; no further analysis needed |
| keyBy.js | safe | Cleared by Jev triage; no further analysis needed |
| keys.js | safe | Cleared by Jev triage; no further analysis needed |
| keysIn.js | safe | Cleared by Jev triage; no further analysis needed |
| lang.js | safe | Cleared by Jev triage; no further analysis needed |
| last.js | safe | Cleared by Jev triage; no further analysis needed |
| lastIndexOf.js | safe | Cleared by Jev triage; no further analysis needed |
| lowerCase.js | safe | Cleared by Jev triage; no further analysis needed |
| lowerFirst.js | safe | Cleared by Jev triage; no further analysis needed |
| lt.js | safe | Cleared by Jev triage; no further analysis needed |
| lte.js | safe | Cleared by Jev triage; no further analysis needed |
| map.js | safe | Cleared by Jev triage; no further analysis needed |
| mapKeys.js | safe | Cleared by Jev triage; no further analysis needed |
| mapValues.js | safe | Cleared by Jev triage; no further analysis needed |
| matches.js | safe | Cleared by Jev triage; no further analysis needed |
| matchesProperty.js | safe | Cleared by Jev triage; no further analysis needed |
| math.js | safe | Cleared by Jev triage; no further analysis needed |
| max.js | safe | Cleared by Jev triage; no further analysis needed |
| maxBy.js | safe | Cleared by Jev triage; no further analysis needed |
| mean.js | safe | Cleared by Jev triage; no further analysis needed |
| meanBy.js | safe | Cleared by Jev triage; no further analysis needed |
| memoize.js | safe | Cleared by Jev triage; no further analysis needed |
| merge.js | safe | Cleared by Jev triage; no further analysis needed |
| mergeWith.js | safe | Cleared by Jev triage; no further analysis needed |
| method.js | safe | Cleared by Jev triage; no further analysis needed |
| methodOf.js | safe | Cleared by Jev triage; no further analysis needed |
| min.js | safe | No malicious patterns detected; the code is a simple lodash min utility with static requires and no dynamic execution, network, filesystem, or process activity. |
| minBy.js | safe | Cleared by Jev triage; no further analysis needed |
| mixin.js | safe | No malicious patterns detected |
| multiply.js | safe | Cleared by Jev triage; no further analysis needed |
| negate.js | safe | Cleared by Jev triage; no further analysis needed |
| next.js | safe | Cleared by Jev triage; no further analysis needed |
| noop.js | safe | Cleared by Jev triage; no further analysis needed |
| now.js | safe | Cleared by Jev triage; no further analysis needed |
| nth.js | safe | Cleared by Jev triage; no further analysis needed |
| nthArg.js | safe | Cleared by Jev triage; no further analysis needed |
| number.js | safe | Cleared by Jev triage; no further analysis needed |
| object.js | safe | Cleared by Jev triage; no further analysis needed |
| omit.js | safe | Cleared by Jev triage; no further analysis needed |
| omitBy.js | safe | Cleared by Jev triage; no further analysis needed |
| once.js | safe | Cleared by Jev triage; no further analysis needed |
| orderBy.js | safe | Cleared by Jev triage; no further analysis needed |
| over.js | safe | Cleared by Jev triage; no further analysis needed |
| overArgs.js | safe | Cleared by Jev triage; no further analysis needed |
| overEvery.js | safe | Cleared by Jev triage; no further analysis needed |
| overSome.js | safe | Cleared by Jev triage; no further analysis needed |
| pad.js | safe | Cleared by Jev triage; no further analysis needed |
| padEnd.js | safe | Cleared by Jev triage; no further analysis needed |
| padStart.js | safe | Cleared by Jev triage; no further analysis needed |
| parseInt.js | safe | Cleared by Jev triage; no further analysis needed |
| partial.js | safe | Cleared by Jev triage; no further analysis needed |
| partialRight.js | safe | Cleared by Jev triage; no further analysis needed |
| partition.js | safe | Cleared by Jev triage; no further analysis needed |
| pick.js | safe | Cleared by Jev triage; no further analysis needed |
| pickBy.js | safe | Cleared by Jev triage; no further analysis needed |
| plant.js | safe | Cleared by Jev triage; no further analysis needed |
| property.js | safe | Cleared by Jev triage; no further analysis needed |
| propertyOf.js | safe | Cleared by Jev triage; no further analysis needed |
| pull.js | safe | Cleared by Jev triage; no further analysis needed |
| pullAll.js | safe | Cleared by Jev triage; no further analysis needed |
| pullAllBy.js | safe | Cleared by Jev triage; no further analysis needed |
| pullAllWith.js | safe | Cleared by Jev triage; no further analysis needed |
| pullAt.js | safe | Cleared by Jev triage; no further analysis needed |
| random.js | safe | Cleared by Jev triage; no further analysis needed |
| range.js | safe | Cleared by Jev triage; no further analysis needed |
| rangeRight.js | safe | Cleared by Jev triage; no further analysis needed |
| rearg.js | safe | Cleared by Jev triage; no further analysis needed |
| reduce.js | safe | Cleared by Jev triage; no further analysis needed |
| reduceRight.js | safe | Cleared by Jev triage; no further analysis needed |
| reject.js | safe | Cleared by Jev triage; no further analysis needed |
| remove.js | safe | Cleared by Jev triage; no further analysis needed |
| repeat.js | safe | Cleared by Jev triage; no further analysis needed |
| replace.js | safe | Cleared by Jev triage; no further analysis needed |
| rest.js | safe | Cleared by Jev triage; no further analysis needed |
| result.js | safe | No malicious patterns detected; this is a legitimate lodash result utility implementing path resolution and function invocation. |
| reverse.js | safe | Cleared by Jev triage; no further analysis needed |
| round.js | safe | Cleared by Jev triage; no further analysis needed |
| sample.js | safe | Cleared by Jev triage; no further analysis needed |
| sampleSize.js | safe | Cleared by Jev triage; no further analysis needed |
| seq.js | safe | Cleared by Jev triage; no further analysis needed |
| set.js | safe | Cleared by Jev triage; no further analysis needed |
| setWith.js | safe | Cleared by Jev triage; no further analysis needed |
| shuffle.js | safe | Cleared by Jev triage; no further analysis needed |
| size.js | safe | Cleared by Jev triage; no further analysis needed |
| slice.js | safe | Cleared by Jev triage; no further analysis needed |
| snakeCase.js | safe | Cleared by Jev triage; no further analysis needed |
| some.js | safe | Cleared by Jev triage; no further analysis needed |
| sortBy.js | safe | Cleared by Jev triage; no further analysis needed |
| sortedIndex.js | safe | Cleared by Jev triage; no further analysis needed |
| sortedIndexBy.js | safe | Cleared by Jev triage; no further analysis needed |
| sortedIndexOf.js | safe | Cleared by Jev triage; no further analysis needed |
| sortedLastIndex.js | safe | Cleared by Jev triage; no further analysis needed |
| sortedLastIndexBy.js | safe | Cleared by Jev triage; no further analysis needed |
| sortedLastIndexOf.js | safe | Cleared by Jev triage; no further analysis needed |
| sortedUniq.js | safe | Cleared by Jev triage; no further analysis needed |
| sortedUniqBy.js | safe | Cleared by Jev triage; no further analysis needed |
| split.js | safe | Cleared by Jev triage; no further analysis needed |
| spread.js | safe | Cleared by Jev triage; no further analysis needed |
| startCase.js | safe | Cleared by Jev triage; no further analysis needed |
| startsWith.js | safe | Cleared by Jev triage; no further analysis needed |
| string.js | safe | Cleared by Jev triage; no further analysis needed |
| stubArray.js | safe | Cleared by Jev triage; no further analysis needed |
| stubFalse.js | safe | Cleared by Jev triage; no further analysis needed |
| stubObject.js | safe | Cleared by Jev triage; no further analysis needed |
| stubString.js | safe | Cleared by Jev triage; no further analysis needed |
| stubTrue.js | safe | Cleared by Jev triage; no further analysis needed |
| subtract.js | safe | Cleared by Jev triage; no further analysis needed |
| sum.js | safe | Cleared by Jev triage; no further analysis needed |
| sumBy.js | safe | Cleared by Jev triage; no further analysis needed |
| tail.js | safe | Cleared by Jev triage; no further analysis needed |
| take.js | safe | Cleared by Jev triage; no further analysis needed |
| takeRight.js | safe | Cleared by Jev triage; no further analysis needed |
| takeRightWhile.js | safe | Cleared by Jev triage; no further analysis needed |
| takeWhile.js | safe | Cleared by Jev triage; no further analysis needed |
| tap.js | safe | Cleared by Jev triage; no further analysis needed |
| templateSettings.js | safe | Cleared by Jev triage; no further analysis needed |
| throttle.js | safe | Cleared by Jev triage; no further analysis needed |
| thru.js | safe | Cleared by Jev triage; no further analysis needed |
| times.js | safe | Cleared by Jev triage; no further analysis needed |
| toArray.js | safe | Cleared by Jev triage; no further analysis needed |
| toFinite.js | safe | Cleared by Jev triage; no further analysis needed |
| toInteger.js | safe | Cleared by Jev triage; no further analysis needed |
| toIterator.js | safe | Cleared by Jev triage; no further analysis needed |
| toJSON.js | safe | Cleared by Jev triage; no further analysis needed |
| toLength.js | safe | Cleared by Jev triage; no further analysis needed |
| toLower.js | safe | Cleared by Jev triage; no further analysis needed |
| toNumber.js | safe | Cleared by Jev triage; no further analysis needed |
| toPairs.js | safe | Cleared by Jev triage; no further analysis needed |
| toPairsIn.js | safe | Cleared by Jev triage; no further analysis needed |
| toPath.js | safe | Cleared by Jev triage; no further analysis needed |
| toPlainObject.js | safe | Cleared by Jev triage; no further analysis needed |
| toSafeInteger.js | safe | Cleared by Jev triage; no further analysis needed |
| toString.js | safe | Cleared by Jev triage; no further analysis needed |
| toUpper.js | safe | Cleared by Jev triage; no further analysis needed |
| transform.js | safe | Cleared by Jev triage; no further analysis needed |
| trim.js | safe | Cleared by Jev triage; no further analysis needed |
| trimEnd.js | safe | Cleared by Jev triage; no further analysis needed |
| trimStart.js | safe | Cleared by Jev triage; no further analysis needed |
| truncate.js | safe | Cleared by Jev triage; no further analysis needed |
| unary.js | safe | Cleared by Jev triage; no further analysis needed |
| unescape.js | safe | Cleared by Jev triage; no further analysis needed |
| union.js | safe | Cleared by Jev triage; no further analysis needed |
| unionBy.js | safe | Cleared by Jev triage; no further analysis needed |
| unionWith.js | safe | Cleared by Jev triage; no further analysis needed |
| uniq.js | safe | Cleared by Jev triage; no further analysis needed |
| uniqBy.js | safe | Cleared by Jev triage; no further analysis needed |
| uniqWith.js | safe | Cleared by Jev triage; no further analysis needed |
| uniqueId.js | safe | Cleared by Jev triage; no further analysis needed |
| unset.js | safe | Cleared by Jev triage; no further analysis needed |
| unzip.js | safe | Cleared by Jev triage; no further analysis needed |
| unzipWith.js | safe | Cleared by Jev triage; no further analysis needed |
| update.js | safe | Cleared by Jev triage; no further analysis needed |
| updateWith.js | safe | Cleared by Jev triage; no further analysis needed |
| upperCase.js | safe | Cleared by Jev triage; no further analysis needed |
| upperFirst.js | safe | Cleared by Jev triage; no further analysis needed |
| util.js | safe | Cleared by Jev triage; no further analysis needed |
| value.js | safe | Cleared by Jev triage; no further analysis needed |
| valueOf.js | safe | Cleared by Jev triage; no further analysis needed |
| values.js | safe | Cleared by Jev triage; no further analysis needed |
| valuesIn.js | safe | Cleared by Jev triage; no further analysis needed |
| without.js | safe | Cleared by Jev triage; no further analysis needed |
| words.js | safe | Cleared by Jev triage; no further analysis needed |
| wrap.js | safe | Cleared by Jev triage; no further analysis needed |
| wrapperAt.js | safe | Cleared by Jev triage; no further analysis needed |
| wrapperChain.js | safe | Cleared by Jev triage; no further analysis needed |
| wrapperLodash.js | safe | Cleared by Jev triage; no further analysis needed |
| wrapperReverse.js | safe | Cleared by Jev triage; no further analysis needed |
| wrapperValue.js | safe | Cleared by Jev triage; no further analysis needed |
| xor.js | safe | Cleared by Jev triage; no further analysis needed |
| xorBy.js | safe | Cleared by Jev triage; no further analysis needed |
| xorWith.js | safe | Cleared by Jev triage; no further analysis needed |
| zip.js | safe | Cleared by Jev triage; no further analysis needed |
| zipObject.js | safe | Cleared by Jev triage; no further analysis needed |
| zipObjectDeep.js | safe | Cleared by Jev triage; no further analysis needed |
| zipWith.js | safe | Cleared by Jev triage; no further analysis needed |
Affected version ranges
None of the 2 scanned versions of lodash are flagged high or critical. The latest scanned version, 4.18.1, is medium risk. Only versions we have scanned are listed; unscanned versions between them are not covered.
| Versions | Verdict | Count | Range | Top findings |
|---|---|---|---|---|
| 4.17.21 โ 4.18.1 | Needs review | 2 | >=4.17.21 <=4.18.1 | Dynamic Code Execution (eval-like); Dynamic Code Execution |
Full list, including published versions not scanned yet: version ranges API.
Scanned versions of lodash
Frequently asked questions
Is lodash safe to use?
No confirmed malware was found in lodash@4.17.21, but the review flagged 1 high, 2 low severity findings for risky patterns worth checking before you rely on it.
Does lodash contain malware?
No malware was identified in lodash@4.17.21 when Togoder Security scanned it on Oct 4, 2026. A new version can still introduce malicious code, so scan the exact versions in your lockfile.
How was lodash checked?
Togoder Security downloaded the published npm package and had an AI model read its 1044 source files, looking for install scripts, credential access, network exfiltration, obfuscation, backdoors and crypto-wallet theft. The results are cached by file hash and shown here.
How do I scan lodash together with the rest of my dependencies?
Upload your lockfile at https://security.togoder.click/scan or call the API documented at https://security.togoder.click/api-docs. Files that have already been scanned, like the ones in lodash@4.17.21, cost nothing.