Is deep-defaults safe to use?

deep-defaults has 1 known vulnerabilities on the latest version (1.0.5). DepScope rates its health at 12/100 (critical risk).

What is the latest version of deep-defaults?

The latest version of deep-defaults is 1.0.5, released 2018-09-15.

Does deep-defaults have known vulnerabilities?

Yes. deep-defaults has 1 known vulnerabilities. See depscope.dev/pkg/npm/deep-defaults for details.

Is deep-defaults deprecated?

Yes, deep-defaults is deprecated: not actively maintained; find alternatives Consider using ? instead.

What are alternatives to deep-defaults?

Popular alternatives to deep-defaults in npm include: ?, semver, ansi-styles, minimatch, debug.

What license does deep-defaults use?

deep-defaults is licensed under MIT.

deep-defaults

npmv1.0.5deprecated

Recursive version of _.defaults

License MITpermissive6 versions1 maintainers1 deps12,409 weekly dl

d5/deep-defaults

/ 100

Health

do not use

deep-defaults has critical vulnerabilities — do not use

Moderate health score (12/100) — verify manually
Package is deprecated
1 critical vulnerabilities

Health breakdown0 – 100

0/25

maintenance

10/20

popularity

15/25

security

15/15

maturity

2/15

community

Vulnerabilities

1 critical

Advisories (1)

Severity	ID	Summary	Fixed in
critical	CVE-2021-25944	deep-defaults vulnerable to prototype pollution	—

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (1)

lodash

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/deep-defaults