lodash._basecopy

Release historycaution

The package has had only two releases, with the latest published in April 2015 and none in the last 12 months. Active work in the linked repository partly offsets the age, but does not show that this release is still refreshed.

Repo package mentioncaution

The linked lodash repository neither matches the package name nor mentions lodash._basecopy in its README. This may be normal for a monorepo sub-package, but the lack of an explicit package reference weakens provenance transparency.

Workflow auditcaution

All 8 workflows were analyzed with no untrusted checkouts, script injection, high-severity findings, or unpinned action references. Three high-confidence low-severity adhoc-package findings are minor workflow hygiene concerns.