zestic/cors-middleware

Release historycaution

Only two releases were published, both within about three days, and there were no releases in the following 21 months. That makes ongoing maintenance uncertain despite the stable version.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last three months, consistent with the long release gap and raising abandonment risk.

Repo toolingcaution

Composer and Make tooling are present, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers or audit findings, but all four referenced actions are unpinned, weakening build reproducibility.