cookie

npmv2.0.1

HTTP server cookie parsing and serialization

Safe to adopt

Yes — cookie scores well across adoption, maintenance, weight, supply chain, and licensing. No download data reported for this package yet. Last published 71 days ago. 10 releases in the last 2 years.

?Adoption: grade ?, Not reported by this registry.
No download data reported for this package yet.
AMaintenance: grade A, Excellent.
Last published 71 days ago. 10 releases in the last 2 years.
AWeight: grade A, Excellent.
Zero runtime dependencies, about 59 KB installed.
ASupply chain: grade A, Excellent.
No install scripts, 3 maintainers, and a contained dependency surface.
ALicense: grade A, Excellent.
MIT — permissive, with no copyleft found in the dependency tree.

Grades are computed deterministically from registry metadata collected by PackageGraph — downloads, dependents, publish dates, the resolved dependency tree, maintainer count, and declared licenses. No third-party scores are used.

Install cost

What you actually take on by adding cookie to a project.

Direct dependencies

Runtime packages this one declares itself.

Total installed

Distinct packages in the full runtime tree, deduplicated the way a package manager would.

59 KB

Install size

Unpacked size of this package plus its entire runtime tree.

—

Tree depth

Longest resolved dependency chain below this package.

Compatibility

Node.js: node >=22
Module format: ESM only
TypeScript: No bundled types
Install scripts: None

Quick start

A usage example from the cookie README.

jsFull README ↗

import * as cookie from "cookie";

cookie vs the alternatives

Packages solving a similar problem in the npm ecosystem, compared on the signals that drive an adoption decision.

Package	Weekly downloads	Dependents	License	Last release
cookiethis page	0	5	MIT	2 months ago
set-cookie-parser	50.2M	2	MIT	1 day ago
cookie-signature	0	1	MIT	1 day ago

Dependencies

Declared by cookie v2.0.1. Runtime dependencies are installed with the package; dev dependencies are not.

Dev (8)

@borderless/ts-scripts ^0.15.0@size-limit/preset-small-lib ^12.0.0@types/node ^26.0.1 @vitest/coverage-v8 ^4.1.9size-limit ^12.0.0top-sites 1.1.225typescript ^6.0.3vitest ^4.1.9

Used by

Popular packages that depend on cookie.

expressnpm

Fast, unopinionated, minimalist web framework

↓ 92.8M/wk◈ 17 dependents⚖ MIT

@vitest/uinpm

UI for Vitest

↓ 8.9M/wk◈ 9 dependents⚖ MITTS

light-my-requestnpm

Fake HTTP injection library

↓ 0/wk◈ 1 dependents⚖ BSD-3-ClauseTS

engine.ionpm

The realtime engine behind Socket.IO. Provides the foundation of a bidirectional connection between client and server

↓ 0/wk◈ 1 dependents⚖ MITTS

mswnpm

Seamless REST/GraphQL API mocking library for browser and Node.js.

↓ 0/wk◈ 5 dependents⚖ MITTS

Relationship graph

Dependencies (left) and dependents (right) of cookie.

cookie dependencies dependents

Frequently installed together

@types/nodenpm

TypeScript definitions for node

↓ 0/wk◈ 327 dependents⚖ MITTS

acceptsnpm

Higher-level content negotiation

↓ 0/wk◈ 7 dependents⚖ MIT

debugnpm

Lightweight debugging utility for Node.js and the browser

↓ 0/wk◈ 46 dependents⚖ MIT

undicinpm

An HTTP/1.1 client, written from scratch for Node.js

↓ 158.5M/wk◈ 15 dependents⚖ MITTS

eslintnpm

An AST-based pattern checker for JavaScript.

↓ 138.4M/wk◈ 279 dependents⚖ MITTS

expressnpm

Fast, unopinionated, minimalist web framework

↓ 92.8M/wk◈ 17 dependents⚖ MIT

vitestnpm

Next generation testing framework powered by Vite

↓ 92.7M/wk◈ 129 dependents⚖ MITTS

corsnpm

Node.js CORS middleware

↓ 69.7M/wk◈ 6 dependents⚖ MIT

@types/wsnpm

TypeScript definitions for ws

↓ 0/wk◈ 21 dependents⚖ MITTS

statusesnpm

HTTP status utility

↓ 0/wk◈ 6 dependents⚖ MIT

@types/corsnpm

TypeScript definitions for cors

↓ 0/wk◈ 4 dependents⚖ MITTS

engine.io-parsernpm

Parser for the client for the realtime Engine

↓ 0/wk◈ 2 dependents⚖ MITTS

Release history

4 releases in the last two years, typically about 40 days apart.

Recent versions of cookie
Version	Published	Size	License
2.0.1latest	2 months ago	59 KB	MIT
2.0.0	2 months ago	59 KB	MIT
1.1.1	9 months ago	59 KB	MIT
1.1.0	9 months ago	59 KB	MIT
1.0.2	1 year ago	45 KB	MIT
1.0.1	1 year ago	45 KB	MIT
1.0.0	1 year ago	44 KB	MIT
0.7.2	1 year ago	23 KB	MIT
0.7.1	1 year ago	23 KB	MIT
0.7.0	1 year ago	23 KB	MIT
0.6.0	2 years ago	23 KB	MIT
0.5.0	4 years ago	23 KB	MIT
0.4.2	4 years ago	19 KB	MIT
0.4.1	6 years ago	18 KB	MIT
0.4.0	7 years ago	17 KB	MIT

Overview

cookie is an npm package that hTTP server cookie parsing and serialization. It has 5 known dependents in the graph. The latest version is 2.0.1, released under the MIT license.

Who should use it

Teams working in the npm ecosystem who need hTTP server cookie parsing and serialization and value a focused solution.

When not to use it

Consider an alternative if you need to have first-class TypeScript types out of the box, or if a more actively-maintained option better fits your npm stack.

Pros

Clear open-source license (MIT).

Cons

No bundled TypeScript types (may require a separate @types package).

Auto-generated from collected registry metadata. No external claims are inferred.

Maintainers

blakeembrey dougwilson ulisesgascon

Keywords

cookie cookies

Funding

https://opencollective.com/express

Frequently asked questions

Should I use cookie?

How do I install cookie?

Run `npm install cookie` to add cookie to your npm project.

What license is cookie released under?

cookie is distributed under the MIT license.

How popular is cookie?

npm does not publish download counts. Within PackageGraph's crawl, 5 known packages depend on cookie.

Is cookie still maintained?

The most recent release of cookie (v2.0.1) was published 2 months ago.

Does cookie run install scripts?

No. cookie does not define preinstall, install, or postinstall scripts, so installing it does not execute publisher-supplied code.