RFC 6265 compliant cookie parser, validator and serializer.
67%
Total Score
67
100
90
83
The package has had no registry release for about 19 months, and there were no releases in the last 12 months; this materially raises staleness risk despite its earlier rapid release cadence.
There were zero commits and zero active maintainers in the last three months, which weakens evidence of active maintenance even though the repository is not archived.
There were no new or closed issues or pull requests in the last month, while five issues and seven pull requests remain open; this suggests limited recent project responsiveness.
The repository has one star and no forks, so external adoption evidence is minimal; this is supporting context rather than a decisive health concern.
All four workflows were analyzed without file failures, and no untrusted checkout or script-injection path was found. However, all 10 action references are unpinned, and a high-confidence bot-conditions finding plus a pull_request_target workflow add workflow hygiene risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
apg-lite Version ^1.0.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.