Package Health/jondotsoy/cookieconverter

jondotsoy/cookieconverter

The MIT license, included tests, and small dependency surface make the code straightforward to inspect and integrate. Its maintenance history is the main concern: no releases or commits have appeared for about 11 years, so compatibility and support are uncertain.

Latest 1.0.4

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published about 11 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency, despite the package having five historical releases.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, following the last push about 11 years ago. This indicates a substantial abandonment risk for ongoing fixes and compatibility work.

Repo tooling

Composer is used for the build, providing appropriate project tooling. No security-scanning tool is present, which is a minor transparency gap but not decisive for this small package.

Repository archived

The linked repository is not archived, but it was last pushed about 11 years ago. The unarchived status does not offset the absence of recent work.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations unclear. This adds a modest transparency concern, especially alongside the long inactivity period.