lodash.groupby

Release historycaution

This release is mature, with 23 historical releases, but there have been no releases in over nine years. The active source repository provides some maintenance reassurance, but the published package itself is very stale.

Repo package mentioncaution

The repository name does not match lodash.groupby and its README does not mention the package. A name mismatch is normal for a monorepo sub-package, but the lack of any package mention leaves some uncertainty that this repository directly backs the release.

Token permissionscaution

Six of eight workflows lack top-level token permission declarations, which leaves permissions less explicit than preferred. None declares top-level write access, and two workflows use read-only permissions, limiting the concern.