dflydev/fig-cookies

Release historycaution

The package has existed since 2015 with 10 releases and a latest release in September 2025, but it had no releases in the following 12 months. Its long release interval suggests slower maintenance rather than abandonment on its own.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the lack of recent registry releases. The recent v3.2.0 release and established project history partly offset this, but current maintenance capacity is unclear.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with 12 open issues and 3 open pull requests. This supports the maintenance slowdown indicated by commit activity, though it does not independently show abandonment.

Security policycaution

The repository has no published security policy, which is a modest transparency gap for a library handling HTTP cookies. Its repository does provide tests and Psalm-based scanning, partially compensating for the missing policy.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all 8 action references are unpinned. The missing top-level permissions block is acceptable on its own and there are no write-wide permissions.