lodash.isnumber

Release historycaution

The latest release was published over 10 years ago, with no releases in the last 12 months. The linked project is still active, which partly offsets but does not remove the release-level staleness concern.

Repo package mentioncaution

The repository name does not match lodash.isnumber and its README does not mention the package, so package ownership is less transparent. The organization-backed lodash monorepo context partly compensates for this mismatch.

Workflow auditcaution

All 8 workflows were analyzed with no high- or medium-severity findings, no unpinned action references, and no dangerous trigger sinks. Three high-confidence low-severity adhoc package-install findings are a small hygiene concern.