Mirror of tough-cookie, bundled and exposed as ES module
57%
Total Score
caution
Usable with caveats: no commits or releases for over two years.
The repository recorded 0 commits and 0 active maintainers in the last three months, indicating that maintenance has stopped or substantially slowed.
The package has had no releases in the last 12 months, and its latest release was published over two years ago. The seven-release history shows an initial burst but no continuing cadence.
The repository has only 1 star, 2 forks, and 1 watcher, so there is little visible community adoption or review capacity to compensate for the inactive maintenance.
The project uses esbuild and npm scripts, which supports a reproducible build, but it reports no security scanning tools.
No security policy is present in the repository, reducing transparency about how vulnerabilities are reported and handled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tough-cookie Version ^4.1.4 | — | — |
@types/tough-cookie Version ^4.0.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.