@edge-runtime/cookies

Release historycaution

The package has 36 releases over about 4 years, but none in the last 12 months; this indicates a meaningful maintenance slowdown despite its previously regular release cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the concern raised by the lack of releases in the last 12 months.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @edge-runtime/cookies. Although a name mismatch can be normal for a monorepo, the missing README reference weakens package-to-repository transparency.

Workflow auditcaution

All three workflows were analyzed, but one high-confidence template-injection finding and one script-injection count affect update.yml, while all 9 action references are unpinned; low-confidence cache findings are secondary hygiene concerns.