# LogRocket: SDK breaking lodash on some sites

- Impact (vendor’s label): major
- Status: postmortem
- Started: 2021-07-12 14:20 UTC · Resolved: 2021-07-12 14:20 UTC · Duration: 0 min
- Updates: 2
- [Vendor status page: https://stspg.io/pwbn1vd1s1f0](https://stspg.io/pwbn1vd1s1f0)
- [Company: LogRocket](https://rewindex.com/company/logrocket.md)

## Summary

LogRocket’s major SDK incident broke some customer sites by overwriting lodash’s \`window.\_\` global due to a build-pipeline bug. It started and was marked resolved at 2021-07-12 14:20 UTC; computed duration was 0 min, though LogRocket reported about an hour and 40 minutes. LogRocket rolled back to a known functional SDK version. _(machine-written, sol)_
## Timeline of updates

- **resolved** 2021-07-12 14:20 UTC: We received customer reports that our SDK interfered with the popular lodash library, resulting in broken customer sites. We've rolled back to a known functional version of our SDK. The incident lasted for about an hour and 40 minutes.
- **postmortem** 2021-07-19 15:49 UTC: A bug in our build pipeline caused our SDK to expose an internal library globally. As a result, our subset of the lodash library was bound to \`window.\_\`, overwriting the existing \`\_\` global for some customer sites. This meant that some expected library functions were not defined after our script loaded. \#\#\#\# Technical Details: \* A code change imported all of lodash and accessed a method on the import instead of importing just the method. \* Webpack bundled lodash, including its \`window.\_ \`assignment despite the library being used in a module import context. \#\#\#\# Remediations: \* We’ve added additional tests to catch unwanted pollution of the window object by our SDK \* We’ve added an internal linting rule to avoid full lodash imports

## Rewindex changes for this incident

- 2021-07-12 14:20 UTC: [Major incident: SDK breaking lodash on some sites](https://rewindex.com/change/i465231b296e51c.md)


---
Canonical: https://rewindex.com/company/logrocket/incidents/tl7jg2nk5v4q · Markdown: https://rewindex.com/company/logrocket/incidents/tl7jg2nk5v4q.md · JSON: https://rewindex.com/api/v1/companies/logrocket/incidents/tl7jg2nk5v4q · Generated 2026-10-18T10:32:10.133Z
