The lodash method `_.isEmpty` exported as a module.
76%
Total Score
100
83
83
The package has had no releases in the last 12 months, and version 4.4.0 was published years ago, which raises staleness concerns. Active repository commits and maintainers partly compensate for the old registry cadence.
The repository name does not match lodash.isempty and its README does not mention the package, so the linkage is less transparent. The mismatch is consistent with a monorepo sub-package, which partly reduces concern.
The package provides no type declarations, which is a minor integration gap for TypeScript consumers of this library function.
All 8 workflows were analyzed with no untrusted checkouts, script injection, high-severity findings, or unpinned action uses. Three high-confidence low-severity findings install packages outside a lockfile, so this is a small hygiene concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.