Is @ianwalter/merge safe to use?

@ianwalter/merge has 1 known vulnerabilities on the latest version (9.0.1). DepScope rates its health at 37/100 (critical risk).

What is the latest version of @ianwalter/merge?

The latest version of @ianwalter/merge is 9.0.1, released 2020-06-10.

Does @ianwalter/merge have known vulnerabilities?

Yes. @ianwalter/merge has 1 known vulnerabilities. See depscope.dev/pkg/npm/@ianwalter/merge for details.

Is @ianwalter/merge deprecated?

No, @ianwalter/merge is actively maintained. Latest release: 9.0.1 (2020-06-10).

What are alternatives to @ianwalter/merge?

Popular alternatives to @ianwalter/merge in npm include: semver, ansi-styles, debug, minimatch, brace-expansion.

What license does @ianwalter/merge use?

@ianwalter/merge is licensed under SEE LICENSE IN LICENSE.

@ianwalter/merge

npmv9.0.1

Recursively merge JavaScript Objects

License SEE LICENSE IN LICENSE19 versions1 maintainers0 deps

ianwalter/merge

/ 100

Health

use with caution

@ianwalter/[email protected] low health (37/100) — consider alternatives

Low health score (37/100)

Health breakdown0 – 100

0/25

maintenance

0/20

popularity

23/25

security

12/15

maturity

2/15

community

Vulnerabilities

1 medium

Advisories (1)

Severity	ID	Summary	Fixed in
medium	CVE-2021-23397	@ianwalter/merge Prototype Pollution via `merge` function	—

Bundle & TypeScript

📦

Bundle Size

0.7 KBminified

0.4 KB gzipped

0 direct dependencies

ESMside effectsscoped

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@ianwalter/merge