Zero dependenciesA few KB minified. ESM, CommonJS and UMD builds, with TypeScript declarations included.
Secure by defaultAutomatic Secure on HTTPS, SameSite=Lax, validated attributes, and __Host- / __Secure- prefix rules applied for you.
Knows when a write failsBrowsers drop invalid cookies silently. setCookie and deleteCookie tell you whether it worked.
PatternsRead or delete cookies by glob, RegExp or predicate — e.g. deleteCookies('_ga*') across every domain and path.
JSON and defaultsStore objects with setJSONCookie, and create a scoped instance with default options and a name prefix.
Modern cookie featuresPartitioned (CHIPS) cookies, session cookies, exact expiry dates and units from seconds to years.