lodash.isobject

Release historycaution

The package has had no release in more than 11 years, despite 10 releases historically; this is a meaningful freshness and abandonment concern for the specific release.

Repo package mentioncaution

The repository name does not match lodash.isobject and its README does not mention the package, so the exact package-to-repository relationship is less transparent; the organization-backed monorepo context partly explains the mismatch.

Workflow auditcaution

All 8 workflows were analyzed with no untrusted checkouts, script injection, or unpinned actions. Three high-confidence low-severity findings install packages outside a lockfile, a limited workflow hygiene concern.