A library for setting up JavaScript factories to help build objects as test data, with full TypeScript support
68%
Total Score
50
100
90
90
The repository recorded zero commits and zero active maintainers in the last three months. This is the strongest concern because it leaves current maintenance and responsiveness unproven.
The project has existed since November 2019 with 24 releases and a latest release in December 2025. Only one release occurred in the last 12 months, indicating a slower current cadence but not abandonment by itself.
There are 17 open issues and 3 open pull requests, but none were opened or closed and no pull requests were merged in the last three months, suggesting limited recent project activity.
The project uses TypeScript, Rollup, and npm scripts for builds, but no security scanning tools were detected, leaving a meaningful security-hygiene gap.
Both workflows omit top-level permissions declarations and rely on job-level permissions only; while no write-level top-level permissions were found, the configuration is less explicit than a repository-wide read-only default.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
lodash.mergewith Version ^4.6.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.