tomkyle/cookies

The MIT license, README, tests, and lack of install-time scripts make the package straightforward to inspect and integrate. Its single-person maintenance base and absent security policy add some transparency risk.

Latest 1.1.9

Packagist

40%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in April 2014, and there have been no releases in over 12 years. Fifteen historical releases show prior activity but do not compensate for the prolonged period without updates.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the repository having been inactive since April 2014.

Maintainers

The registry lists one maintainer, which limits visible publishing redundancy. The linked repository is user-owned, so this is a modest resilience concern rather than evidence of organizational backing.

Repo issue activity

There were no new or closed issues or pull requests in the last month. This is consistent with the long-term inactivity and provides no evidence of ongoing support.

Security policy

The repository has no security policy, leaving no documented route for reporting vulnerabilities. For an old, small library this is a transparency gap, though it is less important than the inactivity evidence.