Is object-deep-merge safe to use?

object-deep-merge has no known vulnerabilities on the latest version (2.0.1). DepScope rates its health at 68/100 (moderate risk).

What is the latest version of object-deep-merge?

The latest version of object-deep-merge is 2.0.1, released 2026-05-19.

Does object-deep-merge have known vulnerabilities?

No known vulnerabilities on the latest version of object-deep-merge.

Is object-deep-merge deprecated?

No, object-deep-merge is actively maintained. Latest release: 2.0.1 (2026-05-19).

What are alternatives to object-deep-merge?

Popular alternatives to object-deep-merge in npm include: ?, semver, debug, minimatch.

What license does object-deep-merge use?

object-deep-merge is licensed under MIT.

object-deep-merge

npmv2.0.1

Strongly-typed deep and recursive object merging. Considers all nested levels of objects, arrays, sets and maps.

License MITpermissive9 versions1 maintainers0 deps3,343,263 weekly dl

/ 100

Health

use with caution

[email protected] low health (68/100) — consider alternatives

Moderate health score (68/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

17/20

popularity

25/25

security

9/15

maturity

2/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Quality signals

OSS Criticality

0.55high

Publish security

npm signed

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/object-deep-merge