giudicelli/neo4j-bundle

Release historydanger

All eight releases were published around April 2021, with no release in over five years and none in the last 12 months. This strongly indicates the package is no longer maintained.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history and leaving current compatibility fixes unlikely.

Repo issue activitycaution

There were no new or closed issues and no new or merged pull requests in the last month. This supports the broader evidence of inactive maintenance, although issue counts are partly unknown.

Workflow auditcaution

All eight analyzed action references are unpinned, and the workflow contains three high-confidence findings for unpinned container images. No untrusted checkout, script injection, or broad top-level write permission was observed, limiting this to a hygiene concern.