When every path is dot-separated and indexes are not allowed, splitting on '.' and walking step by step is the cleanest implementation. The cursor == null || typeof cursor !== 'object' guard short-circuits as soon as the path leaves the object world, which is what callers expect when a key is missing. Returning the explicit fallback instead of undefined lets the caller distinguish "missing" from "set to undefined". Reach for this version when paths come from a config you control.

Real paths in the wild include array indices and bracketed keys: 'items[0].tags[1]'. Normalising [idx] to .idx before splitting lets a single loop walk both arrays and objects since arr[idx] and obj[idx] use the same property access. Accepting either a string OR an already-parsed array of keys is the trick that makes this composable with caller-side caching of parsed paths. The filter(Boolean) drops empty segments so leading dots and double dots don't produce blank lookups.

A set is what get calls for next: most CMS forms, dotted-form-name parsers, and immutable-state utilities need to write to a deep path that may not exist yet. The trick is peeking at the next segment to decide whether to create an array (if the next key is numeric) or an object. This version mutates obj in place; for an immutable equivalent, clone the path with structuredClone first or build a new branch with spreads at each level. Pair this with the get from the previous accordion and you have lodash's get/set in 30 lines.