The internal lodash function `stringToPath` exported as a module.
55%
Total Score
caution
This stable release is from May 2016, while its linked project remains active but does not explicitly mention the package.
The latest release was published in May 2016, with no releases in the last 12 months. That long period without package releases materially raises compatibility and abandonment concerns despite the linked repository remaining active.
All 2 recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is evidenced in this period.
The repository had 2 commits in the last 3 months from 1 active maintainer, showing some current activity but limited recent maintenance capacity for this package.
The linked repository name does not match the package and its README does not mention lodash._stringtopath, leaving uncertainty about whether it directly represents this package rather than only its broader monorepo.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
lodash._basetostring Version ~4.12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.