object-deep-merge

Build provenancecaution

No build attestation or trusted-publisher configuration is present. This limits publication transparency, although the package's simple dependency-free runtime and otherwise clean workflow reduce the practical concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although a recent release and push provide some compensating evidence, this weakens confidence in active maintenance.

Repo issue activitycaution

There are no new or closed issues in the last month and five open pull requests with no merged pull requests in that period. This suggests limited visible review or maintenance activity.

Repo popularitycaution

The repository has only 3 stars, 2 forks, and no watchers. Popularity is supporting evidence rather than a verdict, but this small footprint offers little independent evidence of mature community support.

Security policycaution

The repository has no security policy. For a small library this is a transparency and reporting gap, though it does not by itself indicate abandonment.