@types/lodash.clonedeep

Release historycaution

The package has had no release in nearly three years, despite a long history and ten total releases. Active repository work partly offsets the stale registry cadence, but the exact package may not be receiving updates.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, creating some uncertainty about package-to-repository linkage. The package is documented as a DefinitelyTyped subpath, so the monorepo structure partly explains the mismatch.

Workflow auditcaution

All seven workflows were analyzed, all 25 action references are pinned, and no untrusted checkouts or script injections were found. Four medium-confidence template-injection findings remain hygiene concerns in CI.yml, though no high-severity findings or broad top-level write permissions were reported.