Is deep-assign safe to use?

deep-assign has no known vulnerabilities on the latest version (3.0.0). DepScope rates its health at 24/100 (critical risk).

What is the latest version of deep-assign?

The latest version of deep-assign is 3.0.0, released 2018-11-08.

Does deep-assign have known vulnerabilities?

No known vulnerabilities on the latest version of deep-assign.

Is deep-assign deprecated?

Yes, deep-assign is deprecated: Check out `lodash.merge` or `merge-options` instead. Consider using ? instead.

What are alternatives to deep-assign?

Popular alternatives to deep-assign in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does deep-assign use?

deep-assign is licensed under MIT.

deep-assign

npmv3.0.0deprecated

Recursive Object.assign()

License MITpermissive3 versions1 maintainers1 deps244,599 weekly dl

sindresorhus/deep-assign

/ 100

Health

find alternative

deep-assign is deprecated — find an alternative

Moderate health score (24/100) — verify manually
Package is deprecated

Health breakdown0 – 100

0/25

maintenance

14/20

popularity

25/25

security

15/15

maturity

0/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

0.9 KBminified

0.5 KB gzipped

1 direct dependencies

side effects

🌟

TypeScript

7/10typed

Types from @types/deep-assign (DefinitelyTyped)

Health History

Dependency Tree

License Audit

Dependencies (1)

is-obj

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/deep-assign