lodash.clonedeepwith

Release historycaution

The package has had no registry release in nearly 10 years, despite 14 releases early in its history. That makes this specific release stale, although the linked project remains active.

Repo package mentioncaution

The repository name does not match this package and its README does not mention the package, so the exact package-to-source relationship is less transparent. A monorepo subpackage can explain the mismatch, but the missing mention remains a caution.

Workflow auditcaution

All 8 workflows were analyzed with no high- or medium-severity findings, no untrusted checkout or script injection, and all 20 action references pinned. Three high-confidence low-severity adhoc package installs are a minor reproducibility hygiene gap.