This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.

Package Summary

Tough-cookie provides RFC6265-compliant HTTP cookie parsing and serialization. It's designed for robust cookie handling, essential for applications requiring persistent sessions or complex state management. It supports advanced cookie attributes like domains, paths, and security flags. This makes it a vital dependency for libraries needing reliable cookie persistence across requests and responses, ensuring seamless web scraping and API integration experiences. Key benefits include comprehensive compatibility across diverse server setups and dependable adherence to industry standards.

Release Frequency

Historycal data about package versions

Releases Summary

Tough-cookie's release frequency has varied significantly since 2011. Initial releases were common, followed by long periods of inactivity. Releases picked up around 2014-2015 with major version updates. Activity waned again, with occasional releases until a recent surge in 2024 and 2025, including a major version 6.0.0 released in August 2025. No versions have been released in September 2025 yet.

All Versions

Popularity Overview

GH Stars

GH Forks

296

GH Watchers

Downloads History

Historycal data about package downloads in the last 18 months

Popularity Summary

Tough-cookie downloads show significant growth. From February 2024 to August 2025, downloads generally increased, peaking in June and July 2025. August 2025 downloads decreased significantly, likely reflecting incomplete monthly data since today is September 5, 2025.

Security Overview

Vulnerabilities

Last Version with Vulnerabilities

4.1.2

Vulnerabilities Tracker

Historycal data about package vulnerabilities across all the stable versions

Vulnerabilites Summary

The `tough-cookie` npm package has a history of vulnerabilities. Versions 0.9.0 through 4.1.2 each have one recorded vulnerability. Versions 4.1.3 and later (up to 5.1.2) show zero vulnerabilities.

Complete Security Overview