lodash.unescape

Release historycaution

The package has had no registry release for about 10 years, which limits confidence that this standalone release will receive updates. Active repository work and the package's stable status partly compensate for that age.

Repo package mentioncaution

The repository name does not match lodash.unescape and its README does not mention the package, so the link is less transparent. This is partly expected for a subpackage of the lodash monorepo, but remains a documentation caution.

Type declarationscaution

No type declarations are included. This is a minor integration gap for TypeScript consumers, but the package is a small JavaScript utility and the gap does not indicate abandonment.

Workflow auditcaution

All eight workflows were analyzed, all 20 action references are pinned, and no untrusted checkout or script-injection paths were found. Three high-confidence low-severity findings install packages outside a lockfile, which is a minor reproducibility concern.