merge

(recursive)? merging of (cloned)? objects.

Latest 2.1.1

NPM

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Are you affected? Scan for Free

Health Score Breakdown

Release history

The package has nine releases since May 2012 but none in the last 12 months; the latest registry release was in February 2021, indicating stale release maintenance.

Repo commit activity

No commits or active maintainers were recorded in the last three months, a meaningful sign of slowed maintenance, though the repository was pushed in February 2024.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while seven issues and four pull requests remain open; this suggests limited recent project activity.

Repo tooling

The repository uses TypeScript and npm scripts for builds, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policy

No repository security policy was found, reducing clarity about vulnerability reporting and response expectations.

Vulnerabilities

Title	Versions	Severity
CVE-2020-28499 merge is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes in versions 0.0.0 - 2.1.1.	0.0.0 - 2.1.1	High
CVE-2018-16469 merge is vulnerable to Uncontrolled Resource Consumption in versions 0.0.0 - 1.2.1.	0.0.0 - 1.2.1	High