defu has no known vulnerabilities on the latest version (6.1.7). DepScope rates its health at 84/100 (low risk).

What is the latest version of defu?

The latest version of defu is 6.1.7, released 2026-04-07.

Does defu have known vulnerabilities?

No known vulnerabilities on the latest version of defu.

No, defu is actively maintained. Latest release: 6.1.7 (2026-04-07).

What are alternatives to defu?

Popular alternatives to defu in npm include: semver, debug, minimatch, strip-ansi, ms.

defu

npmv6.1.7

Recursively assign default properties. Lightweight and Fast!

License MITpermissive31 versions1 maintainers0 deps23,289,623 weekly dl

unjs/defu

/ 100

Health

safe to use

[email protected] is safe to use (health: 84/100)

Health breakdown0 – 100

25/25

maintenance

20/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

1.0 KBminified

0.6 KB gzipped

0 direct dependencies

ESMside effects

🌟

TypeScript

10/10typed

bundled

Quality signals

Download trend

stable(0%)

Publish security

npm signed

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/defu