leafs/cookie

Repo bus factorcaution

One contributor made all eight commits in the last three months, giving the project a concentrated bus factor. Organization ownership partly offsets handoff risk, but no second active contributor is shown.

Repo commit activitycaution

The repository recorded eight commits in the last three months, showing recent work rather than collapsed activity. All of that activity came from one active maintainer, which limits resilience.

Security policycaution

The repository has no security policy. For a package handling cookies, this is a transparency gap for reporting and handling security issues, though it is not evidence of a security defect.

Workflow auditcaution

Both workflows were fully analyzed with no untrusted checkout or script-injection findings, and neither uses broad top-level write permissions. However, all four analyzed actions are unpinned, weakening build reproducibility and update control.