Is merge-package.json safe to use?

merge-package.json has no known vulnerabilities on the latest version (8.1.0). DepScope rates its health at 55/100 (high risk).

What is the latest version of merge-package.json?

The latest version of merge-package.json is 8.1.0, released 2025-06-21.

Does merge-package.json have known vulnerabilities?

No known vulnerabilities on the latest version of merge-package.json.

Is merge-package.json deprecated?

No, merge-package.json is actively maintained. Latest release: 8.1.0 (2025-06-21).

What are alternatives to merge-package.json?

Popular alternatives to merge-package.json in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does merge-package.json use?

merge-package.json is licensed under MIT.

merge-package.json

npmv8.1.0

Merge package.json using local, base, and remote

License MITpermissive32 versions1 maintainers2 deps8,630 weekly dl

kellyselden/merge-package.json

/ 100

Health

use with caution

[email protected] low health (55/100) — consider alternatives

Moderate health score (55/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

6/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

38.6 KBminified

11.5 KB gzipped

2 direct dependencies

side effects

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (2)

rfc6902-ordered three-way-merger

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/merge-package.json