Is json-merge-patch safe to use?

json-merge-patch has no known vulnerabilities on the latest version (0.3.0). DepScope rates its health at 35/100 (critical risk).

What is the latest version of json-merge-patch?

The latest version of json-merge-patch is 0.3.0, released 2025-03-25.

No known vulnerabilities on the latest version of json-merge-patch.

No, json-merge-patch is actively maintained. Latest release: 0.3.0 (2025-03-25).

Popular alternatives to json-merge-patch in PyPI include: boto3, boto3/, packaging, urllib3/, certifi.

json-merge-patch is licensed under BSD.

pypiv0.3.0

JSON Merge Patch library (https://tools.ietf.org/html/rfc7386)

License BSDpermissive3 versions1 maintainers0 deps

/ 100

Health

use with caution

[email protected] low health (35/100) — consider alternatives

Health breakdown0 – 100

5/25

maintenance

0/20

popularity

25/25

security

3/15

maturity

2/15

community

Vulnerabilities

none known

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/json-merge-patch