iron-session
Secure, stateless, and cookie-based session library for JavaScript
86%
Total Score
75
100
94
88
100
Health Score Breakdown
The repository is owned by an individual rather than an organization, so the concentrated contributor activity is not supported by visible organizational handoff capacity.
All 18 recent commits came from one contributor, with a 100% top-contributor share and only one active contributor in three months; this creates a meaningful continuity risk.
The repository uses TypeScript and npm build tooling, but no security-scanning tool was detected; the separate security policy and clean workflow audit partly offset this hygiene gap.
All three workflows were analyzed successfully, all 26 action references are pinned, and no injection or untrusted-checkout findings were reported. One release workflow grants top-level write permissions, a mild concern without an untrusted trigger or sink.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 cookie Version ^2.0.1 | — | — |
iron-webcrypto Version ^2.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 6 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.