lodash.isarguments

Release historycaution

The package has 18 releases but none in the last 12 months, and version 3.1.0 was published nearly 10 years ago. The active source repository partly offsets abandonment concerns, but this specific release is stale.

Repo package mentioncaution

The linked lodash repository neither matches the package name nor mentions lodash.isarguments in its README, which makes package-to-repository linkage less transparent. Its organization ownership and monorepo-style layout provide some context but do not remove the gap.

Workflow auditcaution

All 8 workflows were analyzed, all 20 action references are pinned, and no dangerous trigger or untrusted checkout was found. Three high-confidence low-severity adhoc-package findings are minor workflow hygiene concerns.