Is nelmio/cors-bundle safe to use?

nelmio/cors-bundle has no known vulnerabilities on the latest version (2.6.1). DepScope rates its health at 55/100 (high risk).

What is the latest version of nelmio/cors-bundle?

The latest version of nelmio/cors-bundle is 2.6.1, released 2026-01-12.

Does nelmio/cors-bundle have known vulnerabilities?

No known vulnerabilities on the latest version of nelmio/cors-bundle.

Is nelmio/cors-bundle deprecated?

No, nelmio/cors-bundle is actively maintained. Latest release: 2.6.1 (2026-01-12).

What are alternatives to nelmio/cors-bundle?

DepScope has no curated alternatives for nelmio/cors-bundle at this time.

What license does nelmio/cors-bundle use?

nelmio/cors-bundle is licensed under MIT.

nelmio/cors-bundle

composerv2.6.1

Adds CORS (Cross-Origin Resource Sharing) headers support in your Symfony application

License MITpermissive28 versions2 maintainers2 deps

nelmio/NelmioCorsBundle

/ 100

Health

use with caution

nelmio/[email protected] low health (55/100) — consider alternatives

Moderate health score (55/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

0/20

popularity

25/25

security

12/15

maturity

3/15

community

Vulnerabilities

none known

OSS Scorecard

OpenSSF security posture score

3.6/10

weak

Maintainer trust

Active maintainers (3m)

1

Contributors (12m)

5

Primary author dominance

33%

GitHub stars

1,926

single active maintainer 3m

Health History

Dependency Tree

License Audit

Dependencies (2)

symfony/framework-bundle psr/log

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/composer/nelmio/cors-bundle

Last updated · 2026-01-12T15:59:08+00:00