[![NPM version][npm-image]][npm-url] [![NPM downloads][npm-downloads]][npm-url] [![Build Status][travis-image]][travis-url]
15%
Total Score
50
100
57
50
NPM marks the entire package as deprecated with no replacement, so this release is no longer supported. This is a severe adoption risk even though the deprecation is package-wide rather than limited to one release.
The package has 49 releases but none in the last 12 months; its latest release was on July 25, 2020. The earlier regular cadence does not compensate for this prolonged release gap.
There were zero commits and zero active maintainers in the last three months. This confirms the lack of current maintenance capacity shown by the archived repository.
The linked repository is archived, and its last push was on February 4, 2024. Archived source strongly indicates that new maintenance and support should not be expected.
The repository has no security policy. This reduces the transparency of vulnerability reporting, although the package's deprecation and archival status are substantially more serious concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
deepmerge Version ^1.5.2 | — | — |
javascript-stringify Version ^2.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.