deep-object-diff
Deep diffs two objects, including nested structures of arrays and objects, and return the difference.
60%
Total Score
50
90
75
50
Health Score Breakdown
No build attestation or staged publishing is present, so consumers have less evidence connecting the published artifact to its source build.
One registry publishing maintainer is a narrow operational base, though the linked repository and package are clearly aligned with that maintainer.
The repository is owned by an individual rather than an organization, so there is no organizational backing signal to compensate for the narrow maintainer base.
The package has 19 releases over nearly 10 years, but none in the last 12 months and the latest release was in November 2022, indicating materially reduced maintenance activity.
The repository recorded zero commits and zero active maintainers in the last 3 months, which reinforces the risk of an aging maintenance base.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2022-41713 deep-object-diff is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in versions 1.1.6 - 1.1.9. | 1.1.6 - 1.1.9 | Medium |
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 9 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.