Is merge-pkg safe to use?

merge-pkg has no known vulnerabilities on the latest version (0.1.1). DepScope rates its health at 39/100 (critical risk).

What is the latest version of merge-pkg?

The latest version of merge-pkg is 0.1.1, released 2017-11-19.

Does merge-pkg have known vulnerabilities?

No known vulnerabilities on the latest version of merge-pkg.

Is merge-pkg deprecated?

No, merge-pkg is actively maintained. Latest release: 0.1.1 (2017-11-19).

What are alternatives to merge-pkg?

Popular alternatives to merge-pkg in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does merge-pkg use?

merge-pkg is licensed under MIT.

merge-pkg

npmv0.1.1

Merge multiple package.json files together preserving key order and sorting dependencies.

License MITpermissive3 versions1 maintainers2 deps

negativetwelve/merge-pkg

/ 100

Health

use with caution

[email protected] low health (39/100) — consider alternatives

Moderate health score (39/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

0/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

12.4 KBminified

4.6 KB gzipped

2 direct dependencies

side effects

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (2)

lodash.mergewith sort-keys

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/merge-pkg