jazzman/cookie-setter
It has a minimal dependency footprint and a clear MIT license, but limited documentation and workflow hardening reduce confidence. Pin this version only when its small API meets your needs.
56%
Total Score
50
100
89
67
Health Score Breakdown
The package has had five releases since March 2021, but none in the last 12 months and its latest registry release was on December 5, 2023, indicating a meaningful maintenance gap.
The repository recorded zero commits and zero active maintainers in the last three months, leaving little evidence of current development activity.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these figures provide little external evidence of adoption or review.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
Both workflows were analyzed completely with no untrusted checkout or script-injection paths, but all six action references are unpinned and one high-confidence medium-severity finding uses an archived action.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Vasyl Sokolyk |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.