graphaware-edit/neo4j-php-client

Release historydanger

The package is over eight years old, with 148 releases but none in the last 12 months; its latest release was published in May 2018. This is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. No provided maintenance signal compensates for this inactivity.

Repo popularitycaution

The repository has 0 stars, 0 forks, and 1 watcher, providing little supporting evidence of an active user or contributor community. Popularity is not decisive, but it reinforces the maintenance uncertainty.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are present. This is a modest supply-chain hygiene gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy, leaving no documented channel or process for handling vulnerabilities. This is a transparency gap, though it is less serious than the lack of maintenance.