lodash.template

Registry deprecationdanger

The entire package is marked deprecated, with npm directing users to use eta instead. This directly makes the release unsuitable for a new dependency despite the otherwise healthy project evidence.

Repo package mentioncaution

The linked repository name does not match lodash.template and its README does not mention the package, so the package-to-repository link is less transparent. The organization-owned Lodash monorepo context partly explains the mismatch, but not the missing mention.

Token permissionscaution

Six of 8 workflows lack top-level permission declarations, while none declare top-level write permissions and two are explicitly read-only. This is a modest workflow-hygiene gap, not the reason this package is unfit.