fusio/adapter-neo4j

The project is mature, licensed, tested, and backed by an organization. Recent maintenance is limited, and CI uses an unpinned container image that weakens build reproducibility.

Latest v6.2.0

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is a mature package first released over 9 years ago, with its latest release in December 2025. Only one release occurred in the last 12 months, indicating a slow but not abandoned release cadence.

Repo commit activity

The repository had no commits and no active maintainers during the last 3 months. Although the release was recent, this lack of current development activity raises maintenance and abandonment concerns.

Repo tooling

The repository uses Composer, but no security scanning tools were detected. For a small adapter this is a modest transparency gap rather than evidence of an unsafe release.

Security policy

The repository has no security policy. This reduces the project's disclosure transparency, though the package's small scope and existing tests partly limit the concern.

Workflow audit

The single workflow was fully analyzed with no untrusted checkouts or script injection, but all four action references are unpinned and the audit found a high-confidence unpinned container image. This weakens build reproducibility and supply-chain hygiene.