defaults-deep

v0.2.4npm· JavaScript

Like `extend` but recursively copies only the missing properties/values to the target object.

The verdict

Has 1 high-severity advisory. Verify a patched version exists before using. Check the OSV link for the fixed-in version.

Check the OSV link for the fixed-in version.

Live from the npm registry · derived rules, not AI

How it scores

MaintenanceAbandoned

PopularityRising

Security1 advisory

LicensePermissive

DepsLean

Maintenance

Last published 8 years ago.

Popularity

32K downloads / week

Security

1 known advisory (worst: high severity).

License

MIT

Dependencies

3 direct dependencies

Security advisories

Live from OSV.dev · cached 24h

HIGH
Prototype Pollution in defaults-deep
GHSA-pjxw-22xf-6pwc Published 2019-02-07

Recent releases