immer

Create your next immutable state by mutating the current one

Latest 11.1.21

NPM

96%

Total Score

healthy

Healthy release with active maintenance, strong provenance, and only a minor workflow-permission concern.

Are you affected? Scan for Free

Health Score Breakdown

Workflow audit

All three workflows were analyzed with no audit findings, no untrusted checkouts, no script injection, and all eight action references pinned. One release workflow has top-level write permissions, a minor hygiene concern without an observed untrusted sink.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-445255 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. immer is vulnerable to Prototype Pollution in versions 4.0.0 - 11.1.8.	4.0.0 - 11.1.8	Medium
CVE-2021-3757 immer is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes in versions 7.0.0 - 9.0.6.	7.0.0 - 9.0.6	High
CVE-2021-23436 immer is vulnerable to Access of Resource Using Incompatible Type ('Type Confusion') in versions 7.0.0 - 9.0.6.	7.0.0 - 9.0.6	Critical
CVE-2020-28477 immer is vulnerable to Modification of Assumed-Immutable Data (MAID) in versions 7.0.0 - 8.0.1.	7.0.0 - 8.0.1	High