hkvstore/cors-middleware

The source includes tests, a changelog, matching package documentation, and a clear MIT license. Its small maintainer base and limited workflow hardening reduce confidence in long-term support.

Latest v1.4.6

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Maintainers

One registry maintainer is responsible for publishing the package. The linked repository is user-owned rather than organization-backed, so there is little visible publishing redundancy.

Release history

The package has made three releases, but its latest release was nearly 20 months ago and there were no releases in the last 12 months, indicating stalled maintenance.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months, reinforcing the release-history concern.

Repo issue activity

There were no new or merged pull requests and no new or closed issues in the last month; this is consistent with an inactive project, though issue coverage is partly unknown.

Repo tooling

The repository uses Composer and Make, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Mika Tuupola

Direct Dependencies

Dependency	Last Release	Score
psr/http-message Version ^1.0.1\|^2.0	—	—
neomerx/cors-psr7 Version ^2.0\|^3.0	—	—
tuupola/http-factory Version ^1.0.2	—	—
tuupola/callable-handler Version ^1.0	—	—
psr/http-server-middleware Version ^1.0	—	—