react-cookie

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Recent releases partly offset this, but the current pause raises maintenance risk.

Repo issue activitycaution

There are only three open issues and one open pull request, but no issues or pull requests were opened or closed during the last month, consistent with limited recent project activity.

Repo toolingcaution

The repository uses TypeScript, Babel, npm scripts, and Rollup, but no security-scanning tools were detected. The build setup is clear, while security coverage is limited.

Security policycaution

No repository security policy was found, leaving vulnerability reporting expectations undocumented.

Workflow auditcaution

Both workflows were fully analyzed with no untrusted checkouts or script injection. However, the publish workflow has a high-confidence off-lockfile package install and top-level write permissions; the cache-poisoning result is low confidence and is hygiene rather than decisive evidence.