npm package report
Is cookie safe?
Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.
npm packagelast checked 2026-09-19
cookie · verdict ALLOW · no known risk
0.6/10
XYZ SCORE
SUMMARY
Verdict ALLOW · 16 graph-tracked dependencies · provenance: verified (sigstore)
Advisory HistoryclearOK
1 historical advisory record(s) on this package (max severity LOW). Add a version to check whether it is affected.
Commit-Level AnalysisclearOK
1 unconfirmed pattern hit(s) in watched commit history; none verified as malicious.
beautify-benchmark@0.2.4clean
benchmark@2.1.4clean
@borderless/ts-scripts@^0.15.0clean
eslint@5.16.0clean
eslint-plugin-markdown@1.0.0clean
istanbul@0.3.17clean
mocha@10.2.0clean
nyc@15.0.1clean
safe-buffer@5.2.1clean
size-limit@^12.0.0clean
@size-limit/preset-small-lib@^12.0.0clean
top-sites@1.1.194clean
typescript@^5.6.2clean
@types/node@^26.0.1clean
vitest@^2.1.2clean
@vitest/coverage-v8@^2.1.2clean
PACKAGE cookieECOSYSTEM npmDECISION ALLOW
Package facts
Weekly downloads
288.2M
GitHub stars
1.5k
Centrality tier
tier 1
Build provenance
verified (sigstore)
Direct dependencies
16
Baked snapshot · run a live check for the current verdict · browse all packages
Other package reports
copy-webpack-plugincore-jscorscontent-typeconcurrentlycompression