copy-props
Copy properties deeply between two objects.
48%
Total Score
100
75
100
50
Health Score Breakdown
The package is mature with 20 releases, but it has had no release in nearly four years and none in the last 12 months, which indicates substantial maintenance risk.
No build attestation or trusted-publisher provenance is present, so publication origin cannot be independently verified; this is a transparency caution, though the package is a small plain JavaScript artifact.
No type declarations are included, which is a consumer-facing limitation for this JavaScript library and modestly reduces integration quality.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2020-28503 copy-props is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in versions 0.0.0 - 2.0.5. | 0.0.0 - 2.0.5 | High |
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 each-props Version ^3.0.0 | — | — |
is-plain-object Version ^5.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 10 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.