Skip to content

get rif of lodash dependency #991

Open
#1022
Open
get rif of lodash dependency#991
#1022

Description

@socketsguru
socketsguru
opened on Apr 26, 2025

Description

Let's be professionals and remove the old, legacy, bad, ugly and insecure lodash dependency that this repository has. It's very easy to do so and implement our own functions so everybody who uses this packages win.

Reproduction

npm i and a lot of warnings about vulerabilities on lodash dependency come out

Environment

Please provide the following:

  • Version of this library used: 9.0.2
  • Version of the platform or framework used, if applicable: nodejs20
  • Other relevant versions (language, server software, OS, browser): mac
  • Other modules/plugins/libraries that might be involved: N/A

Activity

  1. theflyingape commented on Feb 4, 2026

    @theflyingape
    theflyingape
    on Feb 4, 2026

    Nuxt running Nodejs 24 (works on 22) now throws includes.bind is not a function out of the latest Chrome browser.
    I can replace the lodash function in isValid below with the simpler isString check, and the portal app continues:

    const sign_options_schema = {
...
algorithm: { isValid: includes.bind(null, SUPPORTED_ALGS), message: '"algorithm" must be a valid string enum value' },
...
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions