Is tiny-merge-patch safe to use?

tiny-merge-patch has no known vulnerabilities on the latest version (1.0.0). DepScope rates its health at 69/100 (moderate risk).

What is the latest version of tiny-merge-patch?

The latest version of tiny-merge-patch is 1.0.0, released 2026-03-29.

Does tiny-merge-patch have known vulnerabilities?

No known vulnerabilities on the latest version of tiny-merge-patch.

Is tiny-merge-patch deprecated?

No, tiny-merge-patch is actively maintained. Latest release: 1.0.0 (2026-03-29).

What are alternatives to tiny-merge-patch?

Popular alternatives to tiny-merge-patch in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does tiny-merge-patch use?

tiny-merge-patch is licensed under MIT.

tiny-merge-patch

npmv1.0.0

JSON Merge Patch (RFC 7396) Implementation

License MITpermissive4 versions1 maintainers0 deps52,996 weekly dl

QuentinRoy/tiny-merge-patch

/ 100

Health

use with caution

[email protected] low health (69/100) — consider alternatives

Moderate health score (69/100) — verify manually

Health breakdown0 – 100

20/25

maintenance

10/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

0.4 KBminified

0.3 KB gzipped

0 direct dependencies

ESMside effects

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/tiny-merge-patch