phpnexus/cors
The recent release and included tests, license, and matching repository provide useful transparency. However, no commits in the last three months, only four stars, and unpinned workflow actions weaken confidence in ongoing care.
46%
Total Score
50
50
50
Health Score Breakdown
The package explicitly borrows the identity of phpnexus/cwh, which has far more monthly downloads and stable releases; the artifact overlap is moderate rather than near-total, but the identity signal remains severe.
The project is nearly ten years old and released version 0.3.6 recently, but it has only 10 releases and a median interval of about 254 days, indicating a slow cadence.
The repository recorded zero commits and zero active maintainers in the last three months, despite the recent release, leaving ongoing maintenance capacity uncertain.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.
The repository has no published security policy, which reduces transparency for reporting and handling vulnerabilities in a security-relevant CORS component.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mark Prosser |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^1.1|^2|^3 | — | — |
Weekly Downloads
Info
- Last Published
- 7 months ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.