canirequire › CommonJS › cors
Is cors ESM-only? Can you require() it?
Node.js CORS middleware
Last verified Sep 9, 2026 against cors@2.8.6. JSON
CommonJS CommonJS — require() works on every Node.js version
cors ships CommonJS only. require("cors") works everywhere. import "cors" also works because Node.js and Bun can import CommonJS from ES modules, but only the default export is guaranteed; named imports depend on Node's static analysis of the module.
Does cors@2.8.6 actually load? Runtime test results
Installed and executed on Sep 9, 2026 with require("cors") from a CommonJS file and import "cors" from an ES module.
| Runtime | require("cors") | import "cors" |
|---|---|---|
| Node.js 18 | ✓ works | ✓ works |
| Node.js 20 | ✓ works | ✓ works |
| Node.js 22 | ✓ works | ✓ works |
| Node.js 24 | ✓ works | ✓ works |
| Node.js 26 | ✓ works | ✓ works |
| Bun 1.4 | ✓ works | ✓ works |
How to import cors
ES modules (import)
import cors from "cors";Named imports from a CommonJS package only work when Node.js can statically detect them. If a named import fails, use the default import and destructure.
CommonJS (require)
const cors = require("cors");Module format by version
Derived from the type, main and exports fields of every stable release on npm (35 versions; the newest 35 shown).
| Versions | Format | First published |
|---|---|---|
| 0.0.1 – 2.8.6 | CommonJS | Jan 31, 2013 |
Frequently asked
Is cors ESM-only?
cors@2.8.6 is a CommonJS package. cors ships CommonJS only. require("cors") works everywhere. import "cors" also works because Node.js and Bun can import CommonJS from ES modules, but only the default export is guaranteed; named imports depend on Node's static analysis of the module.
Can I import cors with ES module syntax?
Yes. import cors from "cors" works in Node.js and Bun because they support importing CommonJS modules. Named imports work only when Node.js can statically detect the exports.
Does cors work in Bun?
Yes. import "cors" loaded successfully in Bun 1.4 on Sep 9, 2026.
Does cors ship TypeScript types?
Not bundled. Install the community types with "npm install -D @types/cors".
Links
Other commonjs packages
- debug 4.4.3CommonJS
- semver 7.8.5CommonJS
- ms 2.1.3CommonJS
- picomatch 4.0.7CommonJS
- ajv 8.20.0CommonJS
- source-map 0.8.0CommonJS
- react-is 19.2.8CommonJS
- readable-stream 4.7.0CommonJS
Similar popularity
- google-logging-utils 2.0.1CommonJS
- data-view-byte-length 1.0.2CommonJS
- data-view-buffer 1.0.2CommonJS
- data-view-byte-offset 1.0.1CommonJS
- tar-stream 3.2.1CommonJS
- end-of-stream 1.4.5CommonJS
- sharp 0.35.4Dual
- d3-interpolate 3.0.1ESM-only