illuminate/cookie
Its MIT license, stable major version, and lack of install-time scripts support straightforward adoption. The recent commit lull is partly offset by a long, active release history, though workflow pinning and security documentation remain modest hygiene concerns.
79%
Total Score
75
93
67
Health Score Breakdown
The repository shows 0 commits and 0 active maintainers in the last 3 months, which is a maintenance concern. However, the release history shows releases continuing through the assessment date, partly compensating for the commit gap.
Composer is used as the build tool, which fits the package ecosystem. No security scanning tools were detected, leaving a modest repository-hygiene gap.
The linked repository has no documented security policy. This reduces transparency for reporting and handling vulnerabilities, though it is not evidence of abandonment by itself.
The single workflow was fully analyzed with no detected injection or high-severity findings, and its pull_request_target trigger has no untrusted checkout. Its one action reference is unpinned, creating a limited reproducibility and dependency-integrity concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Taylor Otwell |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version ^13.0 | — | — |
symfony/http-kernel Version ^7.4.0 || ^8.0.0 | — | — |
illuminate/contracts Version ^13.0 | — | — |
illuminate/macroable Version ^13.0 | — | — |
illuminate/collections Version ^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 14 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.