lodash.uniqby

Release historycaution

The package has had no release in nearly 10 years, with zero releases in the last 12 months. The active source repository provides some maintenance context, but this published package itself is stale.

Repo package mentioncaution

The linked lodash repository neither matches the package name nor mentions lodash.uniqby in its README. Although a monorepo mismatch can be ordinary, this leaves the package-to-source relationship less transparent.

Type declarationscaution

The package contains no bundled type declarations. For a JavaScript library consumed directly by applications, that creates a real integration gap.

Workflow auditcaution

All 8 workflows were analyzed with no untrusted checkouts, script injection, or unpinned actions. Three high-confidence low-severity findings install packages outside a lockfile, which is a modest workflow hygiene concern.