lodash.debounce

Release historycaution

The package has had no registry release in more than nine years, with zero releases in the last 12 months. This is a meaningful freshness concern, although the linked source repository remains active.

Repo package mentioncaution

The repository name does not match lodash.debounce and its README does not mention the package, so the linkage is less transparent than expected. The organization-owned monorepo context partly explains the name mismatch but does not remove this concern.

Workflow auditcaution

All eight workflows were analyzed, all 20 action references are pinned, and there are no untrusted checkouts or script injections. Three high-confidence low-severity adhoc-package findings are minor workflow hygiene concerns.