npmpackage.info

Gathering detailed insights and metrics for deepmerge-ts

Other packages similar to deepmerge-ts

ts-deepmerge

7.0.3

A TypeScript deep merge function.

merge-deep-ts

1.2.12

Deep fast merge JavaScript objects with circular references handling and TypeScript support

@trkm/http-session-deepmerge-ts

0.1.0

Stores a page's context in a session: merging existing session context as needed.

magnamvelit

1.5.0

Deeply merge 2 or more objects respecting type information.

Gathering detailed insights and metrics for deepmerge-ts

deepmerge-ts - 7.1.5 | npmpackage.info

deepmerge-ts

Deeply merge 2 or more objects respecting type information.

7.1.5

270

BSD-3-Clause

TypeScript

1.73 kB

101,333,007 4.1

Installations

npm install deepmerge-ts

Developer Guide

BETA

Typescript

Yes

Module System

ESM

Min. Node Version

>=16.0.0

Node Version

20.18.2

NPM Version

10.7.0 Score

98.8

Supply Chain

100

Quality

80.5

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

0

Total

503

Closed

128

Merged

375

Issues

Open

2

Total

51

Closed

49

Releases

v7.1.5

Updated on Feb 23, 2025

v7.1.4

Updated on Jan 23, 2025

v7.1.3

Updated on Oct 08, 2024

v7.1.2

Updated on Oct 08, 2024

v7.1.1

Updated on Oct 04, 2024

v7.1.0

Updated on Jul 20, 2024

View All 44 releases

Languages

TypeScript

TypeScript (100%)

Developer

RebeccaStevens

Download Statistics

Total Downloads

101,333,007

Last Day

81,417

Last Week

1,365,532

Last Month

5,876,201

Last Year

57,590,418

GitHub Statistics

BSD-3-Clause License

270 Stars

827 Commits

10 Forks

1 Watchers

1 Branches

6 Contributors

Updated on Jul 06, 2025

Bundle Size

5.93 kB

Minified

1.73 kB

Minified + Gzipped

Bundlephobia

Maintainers

View All 6 Contributors

Package Meta Information

Latest Version

7.1.5

Package Id

deepmerge-ts@7.1.5

Unpacked Size

132.65 kB

Size

25.84 kB

File Count

NPM Version

10.7.0

Node Version

20.18.2

Published on

Feb 23, 2025

Total Downloads

Cumulative downloads

Total Downloads

101,333,007

Last Day

2.9%

81,417

Compared to previous day

Last Week

-7.6%

1,365,532

Compared to previous week

Last Month

3.2%

5,876,201

Compared to previous month

Last Year

93.3%

57,590,418

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dev Dependencies

@commitlint/cli @commitlint/config-conventional @cspell/dict-cryptocurrencies @eslint/compat @rebeccastevens/eslint-config @rollup/plugin-replace @rollup/plugin-typescript @sebbo2002/semantic-release-jsr @semantic-release/changelog @semantic-release/commit-analyzer @semantic-release/git @semantic-release/github @semantic-release/npm @semantic-release/release-notes-generator @stylistic/eslint-plugin @types/lodash @types/node @typescript-eslint/eslint-plugin @typescript-eslint/parser @vitest/coverage-v8 @vitest/eslint-plugin commitizen cspell cz-conventional-changelog eslint eslint-config-prettier eslint-flat-config-utils eslint-import-resolver-typescript eslint-merge-processors eslint-plugin-eslint-comments eslint-plugin-format eslint-plugin-functional eslint-plugin-import-x eslint-plugin-jsdoc eslint-plugin-jsonc eslint-plugin-markdown eslint-plugin-n eslint-plugin-no-only-tests eslint-plugin-optimize-regex eslint-plugin-prettier eslint-plugin-promise eslint-plugin-regexp eslint-plugin-sonarjs eslint-plugin-unicorn eslint-plugin-yml husky jsonc-eslint-parser knip lint-staged lodash markdownlint-cli2 prettier prettier-plugin-packagejson rimraf rollup rollup-plugin-deassert rollup-plugin-dts-bundle-generator semantic-release tsc-files tsd typescript vite-tsconfig-paths vitest yaml-eslint-parser

DeepmergeTS

Deeply merge 2 or more objects respecting type information.

smart merge diagram

Donate

Any donations would be much appreciated. 😄

Enterprise Users

deepmerge-ts is available as part of the Tidelift Subscription.

Tidelift is working with the maintainers of deepmerge-ts and a growing network of open source maintainers to ensure your open source software supply chain meets enterprise standards now and into the future. Learn more.

Installation

npm

1# Install with npm
2npm install deepmerge-ts
3
4# Install with pnpm
5pnpm add deepmerge-ts
6
7# Install with yarn
8yarn add deepmerge-ts
9
10# Install with bun
11bun add deepmerge-ts

jsr

1# Install in a node project
2npx jsr add @rebeccastevens/deepmerge
3
4# Install in a deno project
5deno add jsr:@rebeccastevens/deepmerge
6
7# Install in a bun project
8bunx jsr add @rebeccastevens/deepmerge

Features

Smart merging - High performance.
Merged output has correct typing.
Record merging support.
Array merging support.
Map and Set merging support.
Customized merging.

Usage

Example using default config

1import { deepmerge } from "deepmerge-ts";
2
3const x = {
4  record: {
5    prop1: "value1",
6    prop2: "value2",
7  },
8  array: [1, 2, 3],
9  set: new Set([1, 2, 3]),
10  map: new Map([
11    ["key1", "value1"],
12    ["key2", "value2"],
13  ]),
14};
15
16const y = {
17  record: {
18    prop1: "changed",
19    prop3: "value3",
20  },
21  array: [2, 3, 4],
22  set: new Set([2, 3, 4]),
23  map: new Map([
24    ["key2", "changed"],
25    ["key3", "value3"],
26  ]),
27};
28
29const z = {
30  record: {
31    prop1: undefined,
32    prop3: undefined,
33    prop2: undefined,
34    prop4: undefined,
35  },
36  array: undefined,
37  set: undefined,
38  map: undefined,
39};
40
41const merged = deepmerge(x, y, z);
42
43console.log(merged);
44
45// Prettierfied output:
46//
47// Object {
48//   "record": Object {
49//     "prop1": "changed",
50//     "prop2": "value2",
51//     "prop3": "value3",
52//     "prop4": undefined,
53//   },
54//   "array": Array [1, 2, 3, 2, 3, 4],
55//   "set": Set { 1, 2, 3, 4 },
56//   "map": Map {
57//     "key1" => "value1",
58//     "key2" => "changed",
59//     "key3" => "value3",
60//   },
61// }

You can try out this example at codesandbox.io.

Merging into a Target

You can use deepmergeInto if you want to update a target object with the merge result instead of creating a new object.

This function is best used with objects that are all of the same type.

Note: If the target object's type differs from the input objects, we'll assert that the target's type has changed (this is not done automatically with deepmergeIntoCustom).

Customized the Merging Process

We provide a customizer function for each of our main deepmerge functions: deepmergeCustom and deepmergeIntoCustom. You can use these to customize the details of how values should be merged together.

See deepmerge custom docs for more details.

Performance

We use smart merging instead of the classic merging strategy which some alternative libraries use. This vastly improves performance, both in execution time and memory usage.

Classic Merge (not what we do)

With classic merging, each input is merged with the next input until all inputs are merged.

This strategy has large performance issues when lots of items need to be merged.

classic merge animation

Smart Merge (what we do)

With our smart merging, we look ahead to see what can be merged and only merge those things.

In addition to performance improvements, this strategy merges multiple inputs at once; allowing for benefits such as taking averages of the inputs.

smart merge animation

API

See API docs.

High

8.1/10

Summary

Prototype Pollution in deepmerge-ts

Affected Versions

< 4.0.2

Patched Versions

4.0.2

10

Maintained

Determines if the project is "actively maintained".

10

Security-Policy

Determines if the project has published a security policy.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/accessibility-alt-text-bot.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/RebeccaStevens/deepmerge-ts/accessibility-alt-text-bot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/RebeccaStevens/deepmerge-ts/build.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/done-label.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/RebeccaStevens/deepmerge-ts/done-label.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint-js.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/RebeccaStevens/deepmerge-ts/lint-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint-knip.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/RebeccaStevens/deepmerge-ts/lint-knip.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint-markdown.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/RebeccaStevens/deepmerge-ts/lint-markdown.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint-packages.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/RebeccaStevens/deepmerge-ts/lint-packages.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint-spelling.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/RebeccaStevens/deepmerge-ts/lint-spelling.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/RebeccaStevens/deepmerge-ts/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/semantic-pr.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/RebeccaStevens/deepmerge-ts/semantic-pr.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/RebeccaStevens/deepmerge-ts/stale.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-labels.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/RebeccaStevens/deepmerge-ts/sync-labels.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-labels.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/RebeccaStevens/deepmerge-ts/sync-labels.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-js.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/RebeccaStevens/deepmerge-ts/test-js.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-js.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/RebeccaStevens/deepmerge-ts/test-js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-types.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/RebeccaStevens/deepmerge-ts/test-types.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-types.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/RebeccaStevens/deepmerge-ts/test-types.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/typecheck.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/RebeccaStevens/deepmerge-ts/typecheck.yml/main?enable=pin
Info: 0 out of 13 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 5 third-party GitHubAction dependencies pinned

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Score

4.1

/10

Last Scanned on 2025-06-30

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More