Skip to main content
Castov
Head-to-Head NPM Comparison

lodashvsunderscore

Detailed package comparison for bundle size, weekly downloads, supply chain security, and license obligations.

Weekly Downloads Leader
lodash94.5M/wk
Security Grade Leader
Equal Rating100/100
TypeScript Ready
External Types
Specification
lodashv4.18.1
underscorev1.13.8
Weekly Downloads94.5MWinner17.9M
Unpacked Size1.35 MB886.8 KB
Security Grade
A+(100/100)
A+(100/100)
Lifecycle Scripts Clean (No scripts) Clean (No scripts)
TypeScript SupportCommunity @typesCommunity @types
License TypeMITPERMISSIVEMITPERMISSIVE
Direct Dependencies00
Active Maintainers12
Last ReleaseApr 1, 2026Feb 19, 2026
Install Commandnpm i lodashnpm i underscore
Full Security ReportView lodash AuditView underscore Audit
Free Castov VS Code Tool

Compare Dependencies Directly in VS Code

Audit supply chain risks, compare lightweight alternative packages, and catch malicious install scripts straight inside your package.json editor.

Download VS Code Extension

More Popular Package Comparisons

react vs vuereact vs angularreact vs sveltevue vs sveltereact vs solid-jspreact vs react

Frequently Asked Questions

Which package is more popular, lodash or underscore?
lodash is currently more popular with higher weekly downloads (94.5M/week) compared to underscore (17.9M/week).
Which has better supply chain security, lodash or underscore?
lodash has a security score of 100/100 (Grade A+), while underscore holds 100/100 (Grade A+). Both packages have equal security standings.
Do lodash and underscore provide TypeScript definitions?
lodash may require external @types definitions, while underscore may require community @types definitions.
What licenses do lodash and underscore use?
lodash is published under the MIT license (PERMISSIVE), and underscore is licensed under MIT (PERMISSIVE).