Package

cors

Node.js CORS middleware

v2.8.6, 22 Jan 2026MITCommonJSTypes: NoneSecurity HTTP servers and web frameworks

$ npm install cors

npm GitHub Homepage

Key numbers

As of 25 Sept 2026

Weekly downloads: 58m; +194% over 12 months
Gzip bundle size: -; No Bundlephobia data
Dependencies: 2; Direct, from package.json
Last release: 8 months ago; v2.8.6
GitHub stars: 6.2k; 515 forks
Open issues / PRs: 18 / 34
Contributors: 62
Commits, last 52 weeks: 12

Downloads

Last week 2026-09-15 to 2026-09-21

Weekly npm downloads, one point per week, weeks starting 23 Sept 2025 to 15 Sept 2026. The y axis starts at zero.

57,990,169 downloads last week, 282,972,112 in the last month. The 12-month change of +194% compares the average of the last 4 weeks with the first 4 weeks of the series.

Maintenance

Releases, last 12 months: 135 in total
Latest version: 2.8.6, 22 Jan 20268 months ago
First published: 31 Jan 2013
Last push to GitHub: 2 Jun 2026114 days before the snapshot
Repository archived: No
Open issues: 18
Open pull requests: 34
Commits, last 52 weeks: 12
Dependents on npm: 25,029

Major versions

v2 first release 2.0.0, 10 Oct 2013
v1 first release 1.0.0, 28 Apr 2013
v0 first release 0.0.1, 31 Jan 2013

Recent releases

Version	Published
2.8.6	22 Jan 2026
2.8.5	4 Nov 2018
2.8.4	13 Jul 2017
2.8.3	30 Mar 2017
2.8.2	29 Mar 2017
2.8.1	8 Sept 2016
2.8.0	23 Aug 2016
2.7.2	23 Aug 2016
2.7.1	28 May 2015
2.7.0	28 May 2015
2.6.1	28 May 2015
2.6.0	27 Apr 2015
2.5.3	20 Jan 2015
2.5.2	10 Nov 2014

Compatibility

Module format: CommonJSFrom package.json type, main and exports fields
TypeScript types: None
Node.js engine range: >= 0.10
Runtimes: -
Unpacked size (npm): 19 kB
Dependencies (2): varyobject-assign

Install

npm install cors

CDN

jsDelivrhttps://cdn.jsdelivr.net/npm/cors@2.8.6/
unpkghttps://unpkg.com/cors@2.8.6/
esm.shhttps://esm.sh/cors@2.8.6

Alternatives

Package	Weekly downloads	Gzip	Last release	Module	Comparison
corser A highly configurable, middleware compatible implementation of CORS.	5.1m	-	10 years ago	CommonJS	-
express-rate-limit Basic IP rate-limiting middleware for Express. Use to limit repeated requests to public APIs and/or endpoints such as password reset.	45.1m	-	27 days ago	ESM + CommonJS	-
rate-limiter-flexible Node.js atomic and non-atomic counters, rate limiting tools, protection from DoS and brute-force attacks at scale	2m	-	7 days ago	CommonJS	-

Sources: npm registry, npm downloads API, GitHub API. Data fetched 25 Sept 2026.

Indexability: Indexed.