dset

A tiny (194B) utility for safely writing deep Object values~!

Latest 3.1.4

NPM

64%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Are you affected? Scan for Free

Health Score Breakdown

Maintainers

Only one registry account has publish access. That can be adequate for a small package, but it leaves a thin publishing and continuity base without organizational backing.

Release history

The package has had no releases in the last 12 months, and its latest release was about two years ago. Its 12-release history over more than eight years shows maturity, but current maintenance is not active.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release and weakening evidence of ongoing care.

Repo tooling

The repository uses npm build scripts but has no detected security scanning tooling. The build setup is present, while the missing scanning is a modest hygiene gap.

Security policy

No security policy was found in the repository, reducing transparency for reporting and handling vulnerabilities.

Vulnerabilities

Title	Versions	Severity
CVE-2024-21529 dset is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in versions 0.0.0 - 3.1.4.	0.0.0 - 3.1.4	High
CVE-2020-28277 dset is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in versions 1.0.0 - 2.0.1.	1.0.0 - 2.0.1	Critical
CVE-2022-25645 dset is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in versions 0.0.0 - 3.1.2.	0.0.0 - 3.1.2	Medium