selective/samesite-cookie

Release historycaution

The package has been maintained since 2019 with eight releases, but only one release in the last 12 months and a median interval of about 245 days indicate a slow cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The same-day release provides some compensating evidence, but the quiet development history still raises maintenance risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest security-process gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. Both action references are unpinned, which weakens build reproducibility and supply-chain hygiene.