npm · #1657 most downloaded on npm

underscore

1.13.8122M downloads/mojashkenas/underscore ↗New releases in your daily digest, changelog included.

JavaScript's functional programming helper library.

Last release 7 months ago
19 Feb 2026
Release timing varies
gaps range from 9 days to 1.8 years
Rarely documented
notes for 8 of 50 stable releases
1 version withdrawn
withdrawn after publishing
15 years old
55 releases · first in 2011

Release timeline

55 releases since 2011

20112013201520172019

Releases

1.13.819 Feb 2026Security
Security fix for CVE-2026-27601
Security fix for CVE-2026-27601
Open source →
Additional notes
This project publishes no release notes. Between 1.13.7 and 1.13.8 there were 21 commits, 18 of them substantive:

Added _.VERSION to the documentation notes section

Moved version to utility, added version to table of contents, changed id, title and > symbol

docs: replace 'ticket' with 'issue' in contributing guidelines

docs: fix article usage for 'issue'

Bump the version to 1.13.8

Bump the copyright years

Add a .editorconfig

Add regression test against stack overflow in _.flatten

Make internal flatten nonrecursive

Add regression test against stack overflow in _.isEqual

Make _.isEqual nonrecursive

Temporarily obfuscate comments

Add preliminary release notes for 1.13.8

Update minified bundles

Revert obfuscations from 42823bb.

Mention CVE-2026-27601 in comments and documentation (#3011)

Add links to diff and docs in 1.13.8 change log entry

Re-generate annotated sources and minified codemaps

One column per quarter.

DataView bugfix, source links, dark mode and other improvements

Open source →

Additional notes

This project publishes no release notes. Between 1.13.6 and 1.13.7 there were 25 commits, 21 of them substantive:

Run patch-package when building the docs
Add source links to all functions in documentation (close #2976)
Add a github entry to the FUNDING.yml
fix(range): step documentation
Add nativeDataView check to isDataView
Add in tests for non-native dataview
Bump GitHub workflow actions to latest versions
Fix typos
feature/theme-toggle
removed extra console log
minor refactor to work on firefox, moving files arond
fail if no toggle
incorporated stylesheet that was already available
minimal dark mode implementation
unncessary prefers-color-scheme: light removal
formatting, filter, darker darkmode
even more css formatting
Bump the version to 1.13.7
Bump the copyright years
Add a change log entry for 1.13.7

…and 1 more.

1.13.623 Sept 2022

Hotfix after 1.13.5 to remove postinstall script

Open source →

Additional notes

This project publishes no release notes. Between 1.13.5 and 1.13.6 there were 9 commits, 7 of them substantive:

Verify that production and doc builds still work in CI
Hostfix for broken builds
Remove patch-package postinstall script
Bump the version to 1.13.6 (hotfix)
Add changelog entry for versioin 1.13.6
Underscore 1.13.6
Update generated files, tag 1.13.6 release

1.13.523 Sept 2022withdrawn: This version has an error in the install script

Patch to add exports.require.module, plus testing updates

Open source →

Additional notes

This project publishes no release notes. Between 1.13.4 and 1.13.5 there were 13 commits, 11 of them substantive:

Upgrade karma{,-sauce-launcher} devDeps, lockfile as side effect
Upgrade karma-qunit
Run npm audit fix
Upgrade nyc and coveralls to latest
Test LTS Node.js versions in CI
Reorganize test scripts to avoid rollup config coverage report
Add a module entry to the require exports condition
Bump the version to 1.13.5
Add a change log entry for 1.13.5
Work around docco build problem using patch-package
Update generated sources, tag 1.13.5 release

1.13.42 Jun 2022

Patch release to address WebPack module federation issue

Open source →

Additional notes

This project publishes no release notes. Between 1.13.3 and 1.13.4 there were 11 commits, 8 of them substantive:

Expand git.io URLs in codeql-analysis workflow (fix #2957)
add fsck error workaround to contributing.md #2887
update contributing to clarify how to clone from other sources
fix heading nesting
Fix for webpack module federation "No version" error
Bump the version to 1.13.4
Add a change log entry for 1.13.4
Update generated files, tag 1.13.4 release

1.13.323 Apr 2022

Patch release with improved compatibility with ExtendScript

Open source →

Additional notes

This project publishes no release notes. Between 1.13.2 and 1.13.3 there were 24 commits, 20 of them substantive:

Enable security scanning with GitHub CodeQL
Prevent CodeQL from scanning irrelevant files
Work around GitHub Actions YAML limitation
Move CodeQL config to a better place and fix reference
Reference CodeQL config in init instead of analysis step
Remove duplicate with
Include test code in security scans
Prevent potential problems from a future colors@>1.4.0 upgrade
Remove unneeded Xvfb from Travis config
Test: Use same QUnit version in CI as on website
Parenthesize mixed expressions of || and && (fix #2949)
Enforce parenthesization of && and || with a linter rule (#2949)
Parenthesize remaining mixed expressions of && and || (#2949)
Prevent test-node from running twice in CI on Node.js 14
Waste even fewer CPU cycles in CI
Add a comment to the modules/.eslintrc (post-merge review comment #2953)
Bump the version to 1.13.3
Update the LICENSE date
Add a change log entry for 1.13.3
Update generated files, tag 1.13.3 release

1.13.216 Dec 2021

Underscore 1.13.2 -- minor bugfixes and improved documentation

Open source →

Additional notes

This project publishes no release notes. Between 1.13.1 and 1.13.2 there were 22 commits, 16 of them substantive:

Modify bug in function emulatedSet
Fix bug in function emulatedSet
Changing Index file to resolve bug in docs
Changing Index file to resolve bug in documents
Correcting typo and Changing docs of _.unescape
Mobile responsive and more readability
add test unit 'throttle three times'
Improving design for Mobile
Restore whitespace consistency
Add a regression test for #2927 (caused in #2158)
Properly convert _.sample input collection _.toArray (fix #2927)
Clarify that _.bind and _.partial can be used together (#2328)
Use statically.io for the 1.13.x series doc archives
Bump the version to 1.13.2
Add a change log entry for 1.13.2
Update generated sources, tag 1.13.2 release

1.13.115 Apr 2021

Restores the underscore.js UMD alias to git

Open source →

Additional notes

This project publishes no release notes. Between 1.13.0 and 1.13.1 there were 6 commits, 5 of them substantive:

Revert .gitignore underscore.js from 57a4a0e (fix #2923)
Add some build clarifications to the documentation (#2923)
Bump the version to 1.13.1
Update the bundle sizes
Add version 1.13.1 to the change log

1.13.09 Apr 2021

Node.js native ESM support in main release stream, docs updates

Open source →

Additional notes

This project publishes no release notes. Between 1.13.0-3 and 1.13.0 there were 10 commits, 8 of them substantive:

Add a security policy
Update the copyright statement
Add .github/FUNDING.yml
Mention funding options in the README and on the website
Remove the prerelease notice from the website
Bump the version to 1.13.0
Add version 1.13.0 to the change log
Update generated sources and tag 1.13.0 release

1.13.0-331 Mar 2021pre-release

Preview release that adds the "module" exports condition

Open source →

1.13.0-215 Mar 2021pre-release