# Is cookie ESM-only? Can you require() it?

> cookie@2.0.1 is ESM-only. ESM-only since 2.0.0 — last CommonJS version is 1.1.1.

HTTP server cookie parsing and serialization

Last verified Sep 9, 2026 against cookie@2.0.1.

cookie dropped its CommonJS build in 2.0.0 (June 2026). The last version with a plain require()-able CommonJS entry is 1.1.1, published Nov 26, 2025; it declares support for Node.js >=18.

On Node.js 22.12+ and newer (cookie@2.0.1 declares Node.js >=22), require("cookie") works with the latest version: Node.js loads synchronous ES modules through require(). Verified on Node.js 22, 24 and 26. Node.js 18 has no require(esm), and cookie@2.0.1 declares Node.js >=22, so 18 is outside its supported range anyway.

cookie@2.0.1 declares engines ">=22", so Node.js 18, 20 are outside its supported range regardless of module format.

## What to do

1. On Node.js 22.12+ and newer (cookie@2.0.1 declares Node.js >=22), require("cookie") works with the latest version: Node.js loads synchronous ES modules through require(). Verified on Node.js 22, 24 and 26.
2. From a CommonJS file, use a dynamic import inside an async function: const cookie = await import("cookie"). That works on every Node.js version the package supports (>=22).
3. If you need a synchronous require() or run Node.js 18: npm install cookie@1.1.1, the last CommonJS release (published Nov 26, 2025); it declares Node.js >=18.
4. cookie@2.0.1 declares engines ">=22", so Node.js 18, 20 are unsupported regardless: upgrade Node.js or pin an older release.
5. TypeScript: npm install -D @types/cookie

## Facts

- Latest: 2.0.1 (Jun 30, 2026)
- Module format: ESM-only
- Last CommonJS version: 1.1.1
- ESM-only since: 2.0.0 (Jun 24, 2026)
- TypeScript types: @types/cookie
- Node engines: >=22
- Weekly downloads: 185.1M
- License: MIT

## Runtime test results for cookie@2.0.1

Installed and executed on Sep 9, 2026 with require("cookie") from a CommonJS file and import "cookie" from an ES module.

| Runtime | require("cookie") | import "cookie" |
|---|---|---|
| Node.js 18 | fails (ERR_REQUIRE_ESM) | works |
| Node.js 20 | works | works |
| Node.js 22 | works | works |
| Node.js 24 | works | works |
| Node.js 26 | works | works |
| Bun 1.4.0 | works | works |

## How to import cookie

ES modules:

```js
import * as cookie from "cookie";
```

Namespace import shown because the ESM entry may have no default export; use named imports for what it exports.

CommonJS:

```js
// Node.js 22.12+ and newer (verified):
const cookie = require("cookie");

// Any Node.js version the package supports (>=22), from an async function:
async function main() {
  const cookie = await import("cookie");
}

// Or pin the last CommonJS release (declares Node.js >=18):
// npm install cookie@1.1.1
```

## Module format by version

Derived from the type, main and exports fields of every stable release on npm (35 versions; the newest 35 shown).

| Versions | Format | First published |
|---|---|---|
| 2.0.0 – 2.0.1 | ESM-only | Jun 24, 2026 |
| 0.0.0 – 1.1.1 | CommonJS | May 28, 2012 |

## Frequently asked

**Is cookie ESM-only?**

cookie@2.0.1 is ESM-only. cookie dropped its CommonJS build in 2.0.0 (June 2026). The last version with a plain require()-able CommonJS entry is 1.1.1, published Nov 26, 2025; it declares support for Node.js >=18.

**Which version of cookie still supports CommonJS / require()?**

1.1.1 is the last version of cookie with a CommonJS build; it declares Node.js >=18. Install it with "npm install cookie@1.1.1". Every version from 2.0.0 on is ESM-only.

**How do I use cookie from a CommonJS file?**

From a CommonJS file, use a dynamic import inside an async function: const cookie = await import("cookie"). That works on every Node.js version the package supports (>=22). On Node.js 22.12+ and newer (cookie@2.0.1 declares Node.js >=22), require("cookie") works with the latest version: Node.js loads synchronous ES modules through require(). Verified on Node.js 22, 24 and 26. Alternatively pin cookie@1.1.1 (declares Node.js >=18).

**Does cookie work in Bun?**

Yes. import "cookie" loaded successfully in Bun 1.4.0 on Sep 9, 2026.

**Does cookie ship TypeScript types?**

Not bundled. Install the community types with "npm install -D @types/cookie".

## Links

- [cookie on npm](https://www.npmjs.com/package/cookie)
- [Source repository](https://github.com/jshttp/cookie)
- [HTML version](https://canirequire.com/package/cookie/)
- [JSON version](https://canirequire.com/package/cookie.json)

---

For scripts and AI agents: any package is at https://canirequire.com/package/<name>/index.md (Markdown) or https://canirequire.com/package/<name>.json (JSON); the site index is https://canirequire.com/llms.txt. Fetch the URL directly; no search needed.