lodash.flatten

Release historycaution

The latest registry release was published over 10 years ago, with no releases in the last 12 months. That is a meaningful freshness and abandonment concern even though the package has a long release history.

Repo package mentioncaution

The repository name differs from the package name and its README does not mention lodash.flatten. A monorepo mismatch is ordinary for a subpackage, but the lack of a README mention leaves some uncertainty about package-to-repository correspondence.

Workflow auditcaution

All 8 workflows were analyzed with no untrusted checkouts, script injection, or write-all permissions, and all 20 action references are pinned. Three high-confidence low-severity adhoc-package findings are minor workflow hygiene concerns.