@mswjs/cookies

Manage request/response cookies in the environments where those are not supported.

Latest 1.1.1

NPM

63%

Total Score

caution

Usable with caveats: no release or commit activity since June 2024.

Health Score Breakdown

Release history

The package has 11 releases over about five years, with a typical interval of about 74 days, but no releases in the last 12 months and the latest was June 13, 2024. This indicates a meaningful maintenance slowdown for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the measured three-month period. Combined with the old latest release, this is evidence of stalled maintenance.

Repo tooling

The repository uses TypeScript, tsup, and npm scripts, but no security scanning tools were detected. The build setup is clear, while security automation coverage is limited.

Security policy

No repository security policy was found. This is a transparency gap, though it is less significant for a small, stable utility with no runtime dependencies.

Workflow audit

Both workflows were analyzed completely with no untrusted checkouts or script injection, and no workflow has top-level write permissions. However, all 6 action references are unpinned, and the audit reported high-confidence use of trusted publishing as an informational hygiene finding.