The lodash method `_.difference` exported as a module.
77%
Total Score
100
86
83
The package has had no release for about 10 years, which raises standalone maintenance and update-risk concerns. The active linked project and stable 4.5.0 release provide meaningful compensation.
The repository name does not match lodash.difference and its README does not mention the package, so the linkage is not explicit. A monorepo can explain the mismatch, but the missing mention remains a transparency caution.
All 8 workflows were analyzed with no high- or medium-severity findings and all action references pinned. Three high-confidence low-severity adhoc-package findings are limited hygiene concerns.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.