{"_id":"@cyberhub/trust-lodash","name":"@cyberhub/trust-lodash","dist-tags":{"latest":"1.0.0"},"versions":{"1.0.0":{"name":"@cyberhub/trust-lodash","version":"1.0.0","description":"Security Trust Report for lodash — 85/100 (A, trusted). Maintainer risk and vulnerability analysis from 8 security databases.","keywords":["lodash","security","trust-score","vulnerability","pkgtrust","CVE"],"license":"MIT","author":{"name":"Nrupak Shah"},"repository":{"type":"git","url":"git+https://github.com/nrupaks/pkgtrust.git"},"homepage":"https://nrupak.com/trust/lodash","_id":"@cyberhub/trust-lodash@1.0.0","bugs":{"url":"https://github.com/nrupaks/pkgtrust/issues"},"_nodeVersion":"20.20.1","_npmVersion":"10.8.2","dist":{"integrity":"sha512-dnGhZ4spbNwxNMgaW5m/E2FwFgg38lkjz2sxLsocoIgykbQV7U9zCDdSz/G7Jn+8LtPaZmUKjxjV62/ruly0+w==","shasum":"528511f786f2383987981554901acafdac32e401","tarball":"https://registry.npmjs.org/@cyberhub/trust-lodash/-/trust-lodash-1.0.0.tgz","fileCount":2,"unpackedSize":1599,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIARWlv7f1rwpGPNMfzEAY6VK5Ynhch+DzJc01sWjFFDiAiEAuJG4xXdtwZRRgOj9jrcKVtjUa4BXEl5HT+7nnci3XB0="}]},"_npmUser":{"name":"nrupaks","email":"nrupaks@gmail.com"},"directories":{},"maintainers":[{"name":"nrupaks","email":"nrupaks@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/trust-lodash_1.0.0_1775116469456_0.654606210323561"},"_hasShrinkwrap":false}},"time":{"created":"2026-04-02T07:54:29.351Z","1.0.0":"2026-04-02T07:54:29.589Z","modified":"2026-04-02T07:54:29.836Z"},"maintainers":[{"name":"nrupaks","email":"nrupaks@gmail.com"}],"description":"Security Trust Report for lodash — 85/100 (A, trusted). Maintainer risk and vulnerability analysis from 8 security databases.","homepage":"https://nrupak.com/trust/lodash","keywords":["lodash","security","trust-score","vulnerability","pkgtrust","CVE"],"repository":{"type":"git","url":"git+https://github.com/nrupaks/pkgtrust.git"},"author":{"name":"Nrupak Shah"},"bugs":{"url":"https://github.com/nrupaks/pkgtrust/issues"},"license":"MIT","readme":"# Security Trust Report: lodash\n\n**Score: 85/100 | Grade: A | Tier: TRUSTED**\n\n> This package has notable risk factors. Review flags below.\n\n## Score Breakdown\n\n| Category | Score |\n|----------|-------|\n| Maintainer Trust | 81/100 |\n| Package Health | 99/100 |\n| Supply Chain | 98/100 |\n| Community | 48/100 |\n\n## Vulnerabilities\n\nNo known vulnerabilities.\n\n## Flags\n\n- **HIGH**: Maintainer(s) removed in v4.11.2: jridgewell\n- **HIGH**: Maintainer(s) removed in v4.16.5: phated\n- **HIGH**: Burst publishing detected — 5+ versions in a single day\n- **MEDIUM**: New maintainer(s) added in v4.17.20: bnjmnt4n\n- **MEDIUM**: No GitHub repo found — community signals unavailable\n- **LOW**: Erratic publish cadence — highly irregular release intervals\n- **INFO**: Published with 2FA enabled (signed)\n- **INFO**: Package has provenance signatures\n- **INFO**: No known vulnerabilities across 8 security databases\n\n## Maintainers\n\n- mathias (2FA)\n- jdalton (2FA)\n- bnjmnt4n (2FA)\n\n---\n*[pkgtrust](https://nrupak.com/trust/lodash) | [Dashboard](https://nrupak.com/trust) | Updated 2026-04-02*","readmeFilename":"README.md","_rev":"1-9c90a6983df5b602fd64ba329fcae433"}