cable/cable-cookie

The MIT license and compact source tree make the release easy to inspect. However, it has had no release or commit activity for nine years, with no tests or security policy, and the linked repository does not identify this package in its name or README.

Latest 1.0.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published nine years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a dependency receiving ongoing maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the nine-year release gap and leaving no observed maintenance activity.

Repo package mention

The linked repository name does not match the package and its README does not mention the package, so the source association is less transparent. The organization ownership provides some context but does not resolve that mismatch.

Repo tooling

Composer is used for builds, but no security-scanning tools are present. That is a modest supply-chain hygiene gap rather than evidence of an unsafe release.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This adds a transparency gap, especially for a package handling cookies and sessions.