# LogRocket: Major incident: SDK breaking lodash on some sites

**Summary:** LogRocket’s major SDK incident broke some customer sites by overwriting lodash’s \`window.\_\` global due to a build-pipeline bug. It started and was marked resolved at 2021-07-12 14:20 UTC; computed duration was 0 min, though LogRocket reported about an hour and 40 minutes. LogRocket rolled back to a known functional SDK version. _(machine-written, sol)_
- Kind: Major incident · Label: outage (model (Jev))
- Changed: 2021-07-12 14:20 UTC · Detected: 2026-10-17 18:22 UTC
- [Source: https://stspg.io/pwbn1vd1s1f0](https://stspg.io/pwbn1vd1s1f0)
- [Company: LogRocket](https://rewindex.com/company/logrocket.md)
- Versions: before (none: first archived) → after incident\_version:54/tl7jg2nk5v4q@ada10de7c349
- Change 1 of 1 for this incident

## What changed

**1. Added: Title**

```diff
+ SDK breaking lodash on some sites
```

**2. Added: Impact**

```diff
+ major
```

**3. Added: Status**

```diff
+ postmortem
```

**4. Added: Start time**

```diff
+ 2021-07-12 14:20 UTC
```

**5. Added: Resolved time**

```diff
+ 2021-07-12 14:20 UTC
```

**6. Added: Update** (resolved) · 2021-07-12 14:20 UTC

```diff
+ We received customer reports that our SDK interfered with the popular lodash library, resulting in broken customer sites. We've rolled back to a known functional version of our SDK. The incident lasted for about an hour and 40 minutes.
```

**7. Added: Update** (postmortem) · 2021-07-19 15:49 UTC

```diff
+ A bug in our build pipeline caused our SDK to expose an internal library globally. As a result, our subset of the lodash library was bound to ʹwindow._ʹ, overwriting the existing ʹ_ʹ global for some customer sites. This meant that some expected library functions were not defined after our script loaded. #### Technical Details: * A code change imported all of lodash and accessed a method on the import instead of importing just the method. * Webpack bundled lodash, including its ʹwindow._ ʹassignment despite the library being used in a module import context. #### Remediations: * We’ve added additional tests to catch unwanted pollution of the window object by our SDK * We’ve added an internal linting rule to avoid full lodash imports
```

## History of this incident

| When (UTC) | Change | Label |
| --- | --- | --- |
| 2021-07-12 14:20 UTC | Major incident: SDK breaking lodash on some sites (this change) | outage |

All LogRocket changes: [timeline](https://rewindex.com/company/logrocket/changes.md)
_Diff excerpts are shown on normalized text: dates, counters and tokens appear as ‹date›, ‹count›, ‹tok›; noise-only edits are hidden. Rewindex shows the changed passages, not a copy of the page._


---
Canonical: https://rewindex.com/change/i465231b296e51c · Markdown: https://rewindex.com/change/i465231b296e51c.md · JSON: https://rewindex.com/api/v1/changes/i465231b296e51c · Generated 2026-10-18T02:29:26.920Z