Is yaml-merge-keys safe to use?

yaml-merge-keys has no known vulnerabilities on the latest version (0.8.2). DepScope rates its health at 64/100 (moderate risk).

What is the latest version of yaml-merge-keys?

The latest version of yaml-merge-keys is 0.8.2, released 2025-09-16.

Does yaml-merge-keys have known vulnerabilities?

No known vulnerabilities on the latest version of yaml-merge-keys.

Is yaml-merge-keys deprecated?

No, yaml-merge-keys is actively maintained. Latest release: 0.8.2 (2025-09-16).

What are alternatives to yaml-merge-keys?

Popular alternatives to yaml-merge-keys in Cargo include: hashbrown, getrandom, windows-sys, syn.

What license does yaml-merge-keys use?

yaml-merge-keys is licensed under MIT/Apache-2.0.

yaml-merge-keys

cargov0.8.2

Implementation of the YAML merge key extension. http://yaml.org/type/merge.html

License MIT/Apache-2.0permissive13 versions0 deps1,706,894 weekly dl

https://gitlab.kitware.com/utils/rust-yaml-merge-keys

/ 100

Health

use with caution

[email protected] low health (64/100) — consider alternatives

Moderate health score (64/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

17/20

popularity

25/25

security

12/15

maturity

0/15

community

Vulnerabilities

none known

Quality signals

OSS Criticality

0.66high

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/cargo/yaml-merge-keys