lodash.keys

Release historycaution

The package has had no release for about 10 years, despite 28 historical releases; this raises package-level maintenance and abandonment concerns.

Repo package mentioncaution

The repository name does not match lodash.keys and its README does not mention the package, so the linkage is less transparent than expected; the organization-owned monorepo partly explains the name mismatch but not the missing mention.

Workflow auditcaution

All 8 workflows were analyzed with no untrusted checkout, script injection, top-level write permissions, or unpinned actions; three high-confidence low-severity adhoc-package findings remain minor hygiene concerns.