enjoys/cookie

The package is small and focused, with a stable release, matching MIT licensing, repository tests, and no install hooks. Its long pause in releases and commits, plus unpinned workflow actions, make future maintenance and build reproducibility less certain.

Latest 2.1.0

Packagist

61%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by an individual account rather than an organization, so the single registry maintainer provides limited visible organizational backing. This is a modest resilience concern, not evidence of abandonment by itself.

Release history

The package has 14 releases since January 2021, but none in the last 12 months; its latest release was in April 2025, roughly 17 months before collection. This indicates a meaningful maintenance pause.

Repo commit activity

There were no commits and no active maintainers in the prior three months, consistent with the release pause and leaving limited evidence of ongoing maintenance.

Workflow audit

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, or audit findings. However, all six action references are unpinned, weakening build reproducibility and update integrity.