ju1ius/macaron

Registry deprecationdanger

The registry marks the entire package as abandoned, with no replacement beyond the same package name. This is a severe warning for continued dependency support.

Release historydanger

Only five releases have been published, and none appeared in the last 12 months; the latest release was over two years ago. The early release cadence does not compensate for the prolonged publishing gap.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This materially raises abandonment risk.

Security policycaution

The repository has no security policy. For a cookie-handling library this reduces transparency about vulnerability reporting, though the clean workflow audit and existing tests provide some compensation.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous triggers, untrusted checkouts, injection findings, or audit failures. However, all 4 analyzed action references are unpinned, leaving a supply-chain hygiene gap.