Parses set-cookie headers into objects
88%
Total Score
70
100
94
50
100
Only one registry account has publish access, creating some operational continuity risk. This is partly offset by evidence of two active repository contributors.
The repository is owned by an individual rather than an organization, so the concentrated contributor and single registry maintainer evidence carries its normal continuity weight.
One contributor made about 71% of recent commits, but a second contributor made the remaining 29%, so concentration is a modest rather than severe continuity concern.
The project uses npm build scripts, but no repository security scanning tool was detected. This is a minor transparency gap for a small package, not evidence of unsafe code.
No security policy was found in the repository, leaving vulnerability reporting and response expectations undocumented.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2025-10763 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. set-cookie-parser is vulnerable to Prototype Pollution in versions 2.0.0 - 2.7.1. | 2.0.0 - 2.7.1 | Medium |
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.