ts-deepmerge

Lifecycle scriptscaution

A prepack script runs during packaging. This is a limited build-time surface rather than an install-time script, so it adds only modest supply-chain complexity.

Release historycaution

The package has existed for about 6 years with 33 releases, but only one release occurred in the last 12 months. The recent release provides some evidence of ongoing maintenance, though the cadence is now sparse.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release partly offsets this, but the current development silence is a maintenance concern.

Repo toolingcaution

The repository uses TypeScript build tooling, which supports reproducible project structure, but no security-scanning tools were detected. The missing scanning is a modest hygiene gap rather than evidence of abandonment.

Security policycaution

No security policy is present in the repository. For a reusable library, this weakens vulnerability-reporting transparency, though it is not by itself evidence that the release is unsafe.