lodash.restparam

Release historycaution

The latest release was published in April 2015, with no releases in the last 12 months; this is a substantial maintenance and compatibility concern despite the linked repository remaining active.

Repo package mentioncaution

The linked repository neither matches the package name nor mentions lodash.restparam in its README, so the package-to-repository relationship is not transparent; organizational backing reduces but does not remove that concern.

Workflow auditcaution

All 8 workflows were analyzed with no untrusted checkouts, script injection, high-severity findings, or unpinned actions. Three high-confidence low-severity findings install packages outside lockfiles, which is a modest reproducibility concern.