cookie-es

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is present, leaving publication provenance less transparent even though other project-health evidence is strong.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months, a real maintenance pause; this is partly offset by the recent release and repository push evidence.

Repo toolingcaution

The repository uses TypeScript, Vitest, npm scripts, and a build tool, showing a structured development process, but no security-scanning tools were detected.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting guidance unclear.