Package status › is cors still maintained?
Actively maintainedcors still maintained?The maintainers published a release recently. Here's the registry evidence, and what it means if this package is in your stack.
| Verdict | Actively maintained |
|---|---|
| Last release on npm | 22 January 2026 (about 6 months ago) |
| Latest version | 2.8.6 |
| Weekly downloads | 61,721,317 |
| Deprecation flag (npm) | None |
| Maintainers listed | 3 |
| Total releases | 35 |
| Source repository | https://github.com/expressjs/cors |
Source: npm registry and npm downloads API, read on 18 July 2026. We report only what the registry publishes — we don't infer repository activity.
corsAs of its last release on 22 January 2026, cors is being actively maintained — the maintainers are still shipping. No action needed. Deprecation rarely announces itself, though, so if this is a load-bearing dependency it's worth having something watch for the day that changes.
Deprely watches npm deprecation flags and published API sunset notices, then emails your team one short heads-up — before a build breaks. No dashboard to check.
First alerts planned for autumn 2026. One email when we open — no spam.