object-path

Access deep object properties using a path

Latest 0.11.8

NPM

57%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Are you affected? Scan for Free

Health Score Breakdown

Release history

The package has a long history and 28 releases, but its latest registry release was about five years ago, with no releases in the last 12 months. This is the strongest maintenance concern.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months, reinforcing that maintenance has effectively stopped recently.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while 22 issues and 13 pull requests remain open. This suggests limited ongoing project attention.

Type declarations

No type declarations are included. This is a minor consumer-ergonomics gap for a JavaScript library, but it does not by itself indicate abandonment or unsafe maintenance.

Vulnerabilities

Title	Versions	Severity
CVE-2021-3805 object-path is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes in versions 0.0.0 - 0.11.8.	0.0.0 - 0.11.8	High
CVE-2021-23434 object-path is vulnerable to Access of Resource Using Incompatible Type ('Type Confusion') in versions 0.0.0 - 0.11.6.	0.0.0 - 0.11.6	Medium
CVE-2020-15256 object-path is vulnerable to Improper Input Validation in versions 0.0.0 - 0.11.5.	0.0.0 - 0.11.5	High