xiaosongshu/port-mapping

Risky to adopt as a dependable production dependency: it has had no release or commit activity for about two years and nine months, with only eight stars and one publisher. It is not deprecated or archived and includes a README and MIT declaration, but the maintenance evidence is too weak.

Latest v1.0.16

Packagist

46%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published about two years and nine months ago, with no releases in the last 12 months. Although the package accumulated eight releases, the current lack of release activity raises abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, providing no evidence of ongoing maintenance. This is consistent with the stale release history and materially weakens confidence in future fixes.

Maintainers

Only one registry account has publish access, which creates a thin publishing base. The linked repository is user-owned rather than organization-backed, so no provided signal compensates for the limited maintainer redundancy.

Repo popularity

The repository has only 8 stars, 0 forks, and 1 watcher. Popularity is not decisive by itself, but these very small adoption signals provide little supporting evidence for project maturity or maintenance capacity.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap for a package that provides network port-mapping functionality.