Package Health

cookie-signature

Sign and unsign cookies

Latest 1.2.2NPMNPM

78%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Are you affected? Scan for Free

Health Score Breakdown

Release historycaution

The package is mature, with 13 releases since October 2012, but it has had no release in the last 12 months. The quiet registry cadence is a maintenance caution, partly offset by the unarchived repository and recent push.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. This indicates limited current development activity, although the package is mature and stable.

Repo toolingcaution

The repository reports no build tooling and no security-scanning tools. For this small dependency the build gap is minor, but the absence of security scanning reduces transparency.

Security policycaution

No security policy was found in the repository. This is a transparency gap, though the package's small scope and zero runtime dependencies limit its practical weight.

Vulnerabilities

TitleVersionsSeverity
CVE-2016-1000236
cookie-signature is vulnerable to Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in versions 0.0.0 - 1.0.4.
0.0.0 - 1.0.4
Medium

Package versions

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
1 year ago
Created
14 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform