fruitcake/php-cors
Usable with caveats: the package is licensed, clearly backed by its matching organization repository, tested in source, and had a recent documented release. However, repository activity has stopped for three months, and the project lacks a security policy and explicit workflow token permissions.
72%
Total Score
67
100
88
80
Health Score Breakdown
The package has existed for about 4 years and released v1.4.0 in December 2025, but only one release occurred in the last 12 months, indicating a relatively slow cadence.
The repository recorded zero commits and zero active maintainers over the last three months. The recent v1.4.0 release partly offsets this because its notes document compatibility and testing updates, but the current maintenance signal is weak.
There are only two open issues and two open pull requests, but no issues or pull requests were opened or closed in the last month, showing limited recent activity.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and assurance gap.
The repository has no security policy, so vulnerability reporting and coordinated response expectations are not documented.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Fruitcake |
| Barryvdh |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/http-foundation Version ^5.4|^6.4|^7.3|^8 | — | — |
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.