lodash.filter

Release historycaution

The latest registry release was published in August 2016, with no releases in the last 12 months. This is a meaningful freshness concern, though the stable 4.6.0 line and active source repository partly compensate for abandonment risk.

Repo package mentioncaution

The repository name does not match lodash.filter and its README does not mention the package, so the linkage should be verified even though subpackages commonly live in monorepos.

Token permissionscaution

Six of eight workflows do not declare top-level token permissions, which is a workflow-hardening gap. None declares top-level write access, and two explicitly use read-only permissions, limiting the concern.

Type declarationscaution

No type declarations are included, which can reduce integration quality for TypeScript consumers. This is a consumer-ergonomics gap rather than evidence of abandonment.