js-extend

v1.0.1npm· JavaScript

A simple extend function based on underscore

The verdict

Has 1 high-severity advisory. Verify a patched version exists before using. Check the OSV link for the fixed-in version.

Check the OSV link for the fixed-in version.

Live from the npm registry · derived rules, not AI

How it scores

MaintenanceAbandoned

PopularityNiche

Security1 advisory

LicensePermissive

DepsZero deps

Maintenance

Last published 10 years ago.

Popularity

6.9K downloads / week

Security

1 known advisory (worst: high severity).

License

ISC

Dependencies

No runtime dependencies

Security advisories

Live from OSV.dev · cached 24h

HIGH
Prototype pollution vulnerability in js-extend
GHSA-mh82-55cm-6gfh Published 2021-06-08

Recent releases