borah/cors-proxy

Release historydanger

The package has had no release in about 2 years and 8 months, with all four releases concentrated on January 22, 2024. This is a meaningful maintenance concern despite the stable 1.0.3 version.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. That supports the evidence of a dormant release line and raises abandonment risk.

Repo toolingcaution

The project uses Composer and Box for its build, which is appropriate for this PHP CLI package. The absence of security scanning is a modest transparency and maintenance gap.

Security policycaution

The linked repository has no security policy. For a local CORS proxy, this is a transparency gap but not by itself evidence that the package is unsafe to depend on.