Real saved report · no signup required
Lodash
npm · lodash
Health score /100
Very slow responsiveness
Daily monitoring ·
Some data sources were unavailable during this scan. Findings may be incomplete.
Upstream repository: lodash/lodash ↗Grades measure upstream repository maintenance health, not the security of a specific installed version. Security findings below concern the dependencies inspected in that repository; coverage may be incomplete.
Maintenance breakdown
Resolution
85/100Good issue resolution
Close rate: 73%.
Recent activity
1 issue closed in the last 30 days.
View evidence ↗
Risk Flags
67/100Slowing development
Last commit was 1 month ago.
View evidence ↗Old release
Latest release (4.18.1) was 7 months ago.
View evidence ↗
Backlog Health
100/100Healthy backlog
Only 0% of open issues are older than 6 months.
Responsiveness
20/100Very slow responsiveness
Median open issue age is 38 days. Issues appear to be neglected.
View evidence ↗
Score history
| Scan completed (UTC) | Grade | Health score |
|---|---|---|
| D | 64.9 | |
| D | 64.9 | |
| F | 58.9 | |
| F | 58.9 | |
| F | 55.9 | |
| F | 55.9 | |
| F | 55.9 | |
| F | 55.9 | |
| F | 55.9 | |
| D | 61.9 | |
| D | 61.9 | |
| D | 61.9 | |
| D | 61.9 | |
| D | 61.9 | |
| D | 61.9 | |
| D | 61.9 | |
| D | 64.9 | |
| B | 80.4 | |
| D | 64.9 | |
| D | 64.9 |
Security findings
ajv 6.10.2
ajv has ReDoS when using `$data` option
unknown · CVE-2025-69873
View advisory ↗Prototype Pollution in Ajv
medium · CVE-2020-15366
View advisory ↗
async 2.6.3
Prototype Pollution in async
high · CVE-2021-43138
View advisory ↗
lodash 4.17.14
Regular Expression Denial of Service (ReDoS) in lodash
medium · CVE-2020-28500
View advisory ↗Command Injection in lodash
high · CVE-2021-23337
View advisory ↗Prototype Pollution in lodash
high · CVE-2020-8203
View advisory ↗lodash vulnerable to Code Injection via `_.template` imports key names
high · CVE-2026-4800
View advisory ↗Lodash has Prototype Pollution Vulnerability in `_.unset`, `_.omit`, and `_.pullAt` functions
medium · CVE-2025-13465
View advisory ↗
Healthier alternatives
- No alternatives were returned by this scan.
We check this public collection daily. You can scan your own dependencies for free.