---
title: "cookie 2.0.1"
description: "Latest published version of cookie is 2.0.1, licensed MIT. Current as of our last registry check."
url: https://inlinr.com/packages/cookie
lang: en
---

[Packages](https://inlinr.com/packages)

# cookie

2.0.1 · 30 Jun 2026 MIT 314.8M / week [Repository](https://github.com/jshttp/cookie) [Homepage](https://github.com/jshttp/cookie#readme) [npm](https://www.npmjs.com/package/cookie) [Atom feed](https://inlinr.com/packages/feed/cookie)

Your version 

## Where each line stands

[Plan an upgrade](https://inlinr.com/packages/cookie/upgrade)

LineNewestSecurity

- 2.x 2.0.1 No known advisory Latest line
- 1.x 1.1.1 No known advisory [To 2.0.1](https://inlinr.com/packages/cookie/upgrade/1.1.1-2.0.1)
- 0.6.x and older 0.7.2 7 open advisories, worst low  · last release Nov 2023, no longer updated [To 2.0.1](https://inlinr.com/packages/cookie/upgrade/0.7.2-2.0.1)

## Latest releases

[All 35 releases](https://inlinr.com/packages/cookie/releases)

1. 2.x · latest line
2. ### [2.0.1](https://inlinr.com/packages/cookie/releases/2.0.1 "Open this release") [](https://github.com/jshttp/cookie/releases/tag/v2.0.1 "Read this release where it was published")  
30 Jun 2026

  - Small performance improvement by incrementing `=` index while parsing `set-cookie` ([#280](https://github.com/jshttp/cookie/pull/280 "https://github.com/jshttp/cookie/pull/280"))
3. ### [2.0.0](https://inlinr.com/packages/cookie/releases/2.0.0 "Open this release") [](https://github.com/jshttp/cookie/releases/tag/v2.0.0 "Read this release where it was published")  
24 Jun 2026

  - removed  
  Remove deprecated code paths ([#272](https://github.com/jshttp/cookie/pull/272 "https://github.com/jshttp/cookie/pull/272"))
  - Switch to ESM ([#273](https://github.com/jshttp/cookie/pull/273 "https://github.com/jshttp/cookie/pull/273"))
  - Faster stringify cookie
4. 1.x · maintenance
5. ### [1.1.1](https://inlinr.com/packages/cookie/releases/1.1.1 "Open this release") [](https://github.com/jshttp/cookie/releases/tag/v1.1.1 "Read this release where it was published")  
26 Nov 2025

  - Overwrite value in passed in options ([#253](https://github.com/jshttp/cookie/issues/253)) [c66147c](https://github.com/jshttp/cookie/commit/c66147c)

Dependency tracking · free for 3 projects

## Know when your own dependencies move

cookie shipped a new major in the last 12 months, among 4 releases. inlinr shows which of your projects are behind, and what the upgrade breaks.

- Advisories reach you  
An email when a critical or high advisory affects a project, before the next install.
- Upgrades checked first  
Peer ranges, Node, ESM-only and types changes read before you bump.
- Only what matters  
Majors and breaking notes stay; patches and sibling bumps fold into one line.

[How dependency tracking works](https://inlinr.com/dependencies)

## Security

[Details](https://inlinr.com/packages/cookie/security)

- [cookie accepts cookie name, path, and domain with out of bounds characters](https://inlinr.com/advisories/GHSA-pxg6-pf52-xh8x) Low ·

## Health

[Details](https://inlinr.com/packages/cookie/security#signals)

- **Provenance**:
- **Publisher**:
- **Maintainers**:
- **Scorecard**:
- **Size**:

## Weekly downloads

Registry facts last checked 4 Nov 2026\. Releases and advisories last read 4 Nov 2026.