Is react-merge-refs safe to use?

react-merge-refs has no known vulnerabilities on the latest version (3.0.2). DepScope rates its health at 68/100 (moderate risk).

What is the latest version of react-merge-refs?

The latest version of react-merge-refs is 3.0.2, released 2025-05-08.

Does react-merge-refs have known vulnerabilities?

No known vulnerabilities on the latest version of react-merge-refs.

Is react-merge-refs deprecated?

No, react-merge-refs is actively maintained. Latest release: 3.0.2 (2025-05-08).

What are alternatives to react-merge-refs?

Popular alternatives to react-merge-refs in npm include: semver, ansi-styles, debug, minimatch, brace-expansion.

What license does react-merge-refs use?

react-merge-refs is licensed under MIT.

react-merge-refs

npmv3.0.2

React utility to merge refs.

License MITpermissive10 versions1 maintainers0 deps1,768,181 weekly dl

gregberge/react-merge-refs

/ 100

Health

safe to use

[email protected] is safe to use (health: 68/100)

Health breakdown0 – 100

10/25

maintenance

17/20

popularity

25/25

security

12/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

0.6 KBminified

0.8 KB gzipped

0 direct dependencies

ESM

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/react-merge-refs