litphp/middleware-cookie

The source repository has no tests, README, or security policy, leaving limited guidance and verification for consumers. Organization backing and an explicit ISC license help, but the project shows little evidence of ongoing care.

Latest v0.9.0

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only two releases, with none in the last 12 months, and the latest release was in June 2019. This long period without releases is strong evidence of abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having received no updates since June 2019. This materially lowers confidence in ongoing maintenance.

Package scaffolding

The package and repository contain no README, tests, or changelog; the missing tests and changelog are not expected in the published artifact, but the lack of repository tests and consumer documentation is a real transparency and verification gap. A GitHub release exists for this version, which partly compensates for the missing changelog.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The build setup provides some structure, while the missing security scanning leaves a smaller hygiene gap.

Security policy

No security policy was found, so there is no documented process for reporting vulnerabilities or coordinating fixes. This is a moderate transparency gap, especially for a middleware library handling cookies.