neos/contentgraph-postgresqladapter

Package scaffoldingdanger

The published README explicitly states that the PostgreSQL adapter is not finalised and not working, and directs users to the Doctrine adapter instead. Repository tests are present, but they do not compensate for this release being described as unusable.

Repo bus factorcaution

Two contributors are active, but one made 6 of 7 recent commits, concentrating most activity in a single person. Organization backing partly reduces handoff risk, so this is a moderate concern rather than a severe one.

Repo toolingcaution

The repository uses Composer and Make, showing a defined build process, but no security scanning tools were detected. This is a modest transparency and supply-chain hygiene gap.

Version stabilitycaution

Version 9.1.4 is a stable major release rather than a prerelease, which is normally positive. That maturity signal is outweighed here by the package README's explicit statement that the adapter is unfinished.

Workflow auditcaution

The only workflow was fully analyzed with no untrusted checkouts or script injection, and its low-confidence-independent findings are limited to two high-confidence low-severity unsound-ternary issues. All 3 action references are unpinned, which creates a smaller workflow reproducibility and supply-chain concern.