endyjasmi/neo4j
The repository still contains tests and the release is clearly licensed, but there is no security policy and no recent development evidence. Those positives do not offset the project's withdrawal and abandonment signals.
10%
Total Score
0
40
50
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement provided. This is a direct warning against taking a new dependency on it.
The latest release was published over 11 years ago, with no releases in the last 12 months. This indicates the package is no longer being maintained.
The repository recorded no commits and no active maintainers in the last 3 months. This supports the abandonment concerns rather than showing merely slow development.
The linked repository is archived, and its last push was over 7 years ago. Archived source is a severe abandonment risk for a library dependency.
The repository has no security policy or security-scanning tooling. This is a secondary transparency and vulnerability-response gap, although it is outweighed by the stronger abandonment evidence.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Endy Jasmi |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/events Version 4.* | — | — |
illuminate/support Version 4.* | — | — |
kriswallsmith/buzz Version 0.* | — | — |
symfony/dom-crawler Version 2.* | — | — |
illuminate/container Version 4.* | — | — |
Weekly Downloads
Info
- Last Published
- 11 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.