dneustadt/csrf-cookie-bundle
The package has a clear MIT license, a focused dependency set, and release notes for this version. A single maintainer and missing security policy leave less resilience if maintenance stops.
60%
Total Score
50
88
50
Health Score Breakdown
Only one registry maintainer is listed. That creates limited publishing resilience, though the linked repository is owned by the same individual and the package has a clear project identity.
The package has 8 releases since October 2020, but none in the last 12 months; its latest release was in June 2023. This indicates a substantial maintenance gap, although the stable release history is otherwise established.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, reinforcing the broader evidence that active maintenance has stalled.
The linked repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency and maintenance gap for a CSRF protection bundle.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 David Neustadt |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/config Version ^5.0|^6.0 | — | — |
symfony/http-kernel Version ^5.0|^6.0 | — | — |
symfony/security-csrf Version ^5.0|^6.0 | — | — |
symfony/http-foundation Version ^5.0|^6.0 | — | — |
symfony/dependency-injection Version ^5.0|^6.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.