lodash.bind

Release historycaution

The latest registry release was in August 2016, with no releases in the last 12 months, which is a maintenance concern. The linked project remains actively maintained, partly compensating for the package's age.

Repo package mentioncaution

The repository name does not match lodash.bind and its README does not mention the package, creating some uncertainty about the exact package-to-repository link. The package's lodash submodule context makes a monorepo relationship plausible, so this is a caution rather than a severe risk.

Workflow auditcaution

All 8 workflows were analyzed with no untrusted checkout or script-injection findings, all 20 action references were pinned, and only three high-confidence low-severity ad hoc package-install findings were reported.