Is str-merge safe to use?

str-merge has no known vulnerabilities on the latest version (1.0.6). DepScope rates its health at 38/100 (critical risk).

What is the latest version of str-merge?

The latest version of str-merge is 1.0.6, released 2025-01-01.

Does str-merge have known vulnerabilities?

No known vulnerabilities on the latest version of str-merge.

Is str-merge deprecated?

No, str-merge is actively maintained. Latest release: 1.0.6 (2025-01-01).

What are alternatives to str-merge?

Popular alternatives to str-merge in npm include: semver, ansi-styles, debug, minimatch, brace-expansion.

What license does str-merge use?

str-merge is licensed under MIT.

str-merge

npmv1.0.6

String utilities and conflict conditionals (includes tailwind-merge).

License MITpermissive8 versions1 maintainers1 deps

ilkhoeri/str-merge

/ 100

Health

use with caution

[email protected] low health (38/100) — consider alternatives

Low health score (38/100)

Health breakdown0 – 100

5/25

maintenance

0/20

popularity

25/25

security

6/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (1)

tailwind-merge

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/str-merge