lodash.memoize

Release historycaution

The latest registry release was in August 2016, with no releases in the last 12 months. The active linked project partly offsets abandonment risk, but this specific package release is still very old.

Repo package mentioncaution

The repository name does not match lodash.memoize and its README does not mention the package. Although a subpackage in a monorepo can legitimately use a broader repository, this leaves the package-to-source relationship less transparent.

Workflow auditcaution

All eight workflows were analyzed, all 20 action references are pinned, and no high- or medium-severity findings were reported. Three high-confidence low-severity adhoc-package findings are limited hygiene concerns.