Is merge-deep2 safe to use?

merge-deep2 has 1 known vulnerabilities on the latest version (3.0.6). DepScope rates its health at 37/100 (critical risk).

What is the latest version of merge-deep2?

The latest version of merge-deep2 is 3.0.6, released 2017-08-09.

Does merge-deep2 have known vulnerabilities?

Yes. merge-deep2 has 1 known vulnerabilities. See depscope.dev/pkg/npm/merge-deep2 for details.

Is merge-deep2 deprecated?

No, merge-deep2 is actively maintained. Latest release: 3.0.6 (2017-08-09).

What are alternatives to merge-deep2?

Popular alternatives to merge-deep2 in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does merge-deep2 use?

merge-deep2 is licensed under MIT.

merge-deep2

npmv3.0.6

Recursively merge values in a javascript object.

License MITpermissive3 versions1 maintainers3 deps33 weekly dl

luyuan/merge-deep

/ 100

Health

use with caution

[email protected] low health (37/100) — consider alternatives

Moderate health score (37/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

0/20

popularity

23/25

security

12/15

maturity

2/15

community

Vulnerabilities

1 medium

Advisories (1)

Severity	ID	Summary	Fixed in
medium	CVE-2021-23700	Prototype Pollution in merge-deep2.	—

Bundle & TypeScript

📦

Bundle Size

7.3 KBminified

1.6 KB gzipped

3 direct dependencies

side effects

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (3)

arr-union clone-deep kind-of

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/merge-deep2