lodash._getnative

Release historydanger

The package has had only two releases, with the latest in June 2015 and none in about 11 years. The linked repository remains active, but that does not demonstrate maintenance of this specific release line.

Repo package mentioncaution

The linked lodash repository neither matches the package name nor mentions lodash._getnative in its README, so the package-to-source relationship is not clearly established. Its monorepo context provides some explanation but does not remove the provenance gap.

Workflow auditcaution

All 8 workflows were analyzed, all 20 action references are pinned, and no high- or medium-severity findings were reported. Three high-confidence low-severity adhoc-package findings are a minor workflow hygiene concern.