Is @alexlafroscia/yaml-merge safe to use?

@alexlafroscia/yaml-merge has no known vulnerabilities on the latest version (4.1.0). DepScope rates its health at 49/100 (high risk).

What is the latest version of @alexlafroscia/yaml-merge?

The latest version of @alexlafroscia/yaml-merge is 4.1.0, released 2021-06-25.

Does @alexlafroscia/yaml-merge have known vulnerabilities?

No known vulnerabilities on the latest version of @alexlafroscia/yaml-merge.

Is @alexlafroscia/yaml-merge deprecated?

No, @alexlafroscia/yaml-merge is actively maintained. Latest release: 4.1.0 (2021-06-25).

What are alternatives to @alexlafroscia/yaml-merge?

Popular alternatives to @alexlafroscia/yaml-merge in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @alexlafroscia/yaml-merge use?

@alexlafroscia/yaml-merge is licensed under MIT.

@alexlafroscia/yaml-merge

npmv4.1.0

A super simple tool for merging YAML files

License MITpermissive13 versions1 maintainers3 deps18,804 weekly dl

/ 100

Health

use with caution

@alexlafroscia/[email protected] low health (49/100) — consider alternatives

Moderate health score (49/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

10/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

140.0 KBminified

47.6 KB gzipped

3 direct dependencies

side effectsscoped

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (3)

glob js-yaml lodash

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@alexlafroscia/yaml-merge