omegaalfa/cookie

Release historycaution

The package has made only one release, with no releases in the last 12 months and no follow-up since its first release over two years ago. This is the clearest sign of limited maintenance capacity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. A recent push exists, but the current activity measure still indicates a thin maintenance record.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear for consumers. This is a transparency gap, though it is partly offset by the repository's automated security tooling.

Workflow auditcaution

All seven analyzed action references are unpinned, which weakens build reproducibility and supply-chain hygiene. The single workflow with top-level write permissions is only a mild concern because the audit found no untrusted checkout or script-injection path.