initphp/cookies

Release historycaution

The package has only two releases over roughly four years, with one release in the last 12 months and a median interval of about 3.9 years, indicating a sparse release history despite the recent update.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance even though a recent release exists.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool is configured, leaving a modest transparency and maintenance gap.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all seven action references are unpinned, so workflow dependencies can change without a reviewed version.