Package Health

deep-equal

node's assert.deepEqual algorithm

Latest 2.2.3NPMNPM

70%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Dependency profilecaution

The package declares 18 runtime dependencies for a small utility, increasing transitive maintenance exposure compared with a self-contained implementation. No provided signal shows that this dependency surface is causing instability.

Release historycaution

The package has 23 releases over more than 14 years, but no release in the last 12 months and its latest release was in November 2023. That makes registry maintenance look slow and lowers confidence in receiving fixes promptly.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which suggests a recent pause in development. The repository's March 2026 push partially offsets abandonment concerns but does not restore a clear release cadence.

Workflow auditcaution

All six workflows were analyzed successfully and no audit findings or untrusted checkouts were reported. However, all 12 analyzed action references are unpinned; the pull_request_target triggers have no reported sink, so this is a reproducibility and maintenance caution rather than a severe workflow risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
isarray
Version ^2.0.5
—
—
is-regex
Version ^1.1.4
—
—
call-bind
Version ^1.0.5
—
—
object-is
Version ^1.1.5
—
—
object-keys
Version ^1.1.1
—
—

Weekly Downloads

Info

Last Published
2 years ago
Created
14 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform