- fix(security): reject prototype path segments to prevent prototype pollution
- fix: warn when overwriting a falsy intermediate value
- fix: clone array path arguments so callers' arrays are not mutated
- fix: throw a descriptive
TypeErrorfor non-string/array paths - doc: README
onlyIfUndefined→onlyWhenUndefined