lodash._basetostring

Build provenancecaution

No build attestation or trusted-publisher provenance is present. This is a transparency limitation, but the available repository and tooling evidence provide some compensating context.

Release historycaution

Only three releases exist, with no release in roughly 10 years and no releases in the last 12 months. This is a meaningful package-level maintenance concern, although the linked project remains active.

Repo package mentioncaution

The repository name does not match this package and its README does not mention the package, which creates some uncertainty about package-to-repository linkage. The organization-owned lodash monorepo context partly compensates for that concern.