es-cookie

Lifecycle scriptscaution

A prepare install-time script is present, adding execution during installation and some supply-chain exposure compared with a package without lifecycle scripts.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the concentrated maintainer and contributor base is not offset by visible organizational backing.

Release historycaution

The package has had no registry release in over two years, despite a history of 10 releases; this raises maintenance and freshness concerns.

Repo bus factorcaution

All three recent commits came from one contributor, leaving maintenance dependent on a single active person.

Repo toolingcaution

The repository uses TypeScript and Vitest for build and test tooling, but no security scanning tool was detected; the tooling is adequate with a modest hygiene gap.