[As community content, this post reflects the views and opinions of the particular author and does not necessarily reflect the official stance of Neo4j.]
Every dataset has a story to tell — we just need the right tools to find it. At Graph Story, we believe that graph databases are one of the best tools for finding the story in your data. Because we are also active members of several open source communities, we wanted to find interesting stories about those communities. So, we decided to look at package ecosystems used by developers. The first one we tackled was Packagist, the community package repository for PHP. Nearly 20,000 maintainers have submitted over 60,000 packages to Packagist, which gives us a lot of interesting data to investigate.How We Used Neo4j to Graph the Packagist Data
Collecting this data and getting it into Neo4j was relatively straightforward. One HTTP endpoint on the Packagist site returns a JSON array of all the package names. We iterated over that, and made individual calls to another endpoint to retrieve a JSON hash for each package, which includes both base package data and information on each version of the package, including what packages a given version requires. The data model for our initial version was pretty straightforward. We have three node labels:PackageMaintainerVersion
HAS_VERSION (Package)-[:HAS_VERSION]->(Version)MAINTAINED_BY (Package)-[:MAINTAINED_BY]->(Maintainer)REQUIRES (Version)-[:REQUIRES]->(Package)REQUIRES_DEV (Version)-[:REQUIRES_DEV]->(Package)SUGGESTS (Version)-[:SUGGESTS]->(Package)
- What packages get required the most by other packages?
- What maintainers have the most packages?
- What maintainers have the most requires of their packages?
- What maintainers work together the most (packages can have multiple maintainers)?
- What are the shortest paths between two given packages, or two given maintainers
Our Findings
You can see our results so far at packagist.graphstory.com. Some of what we found was expected: certain well-known open source component libraries get required the most, likedoctrine/orm and illuminate/support.
It gets more interesting when examining maintainers, though. Some are high profile folks in the PHP community, like fabpot and taylorotwell, but some are people with whom we weren't as familiar. It certainly made us re-examine what we thought we knew about the PHP community – it's not always folks who are speaking at conferences that are making big contributions.
The shortest path analyses were interesting as well. There were a few packages that showed up in these paths over and over to tie together maintainers and packages, such as psr/log. "Keystone packages" might be a good term for these, because they seem to join and support the PHP open source community again and again.
A Cypher Example: Finding Top Maintainers by Packages
Here's one example Cypher query we ran to find the top Packagist maintainers by package count:
MATCH (m1:Maintainer)<-[:MAINTAINED_BY]-(Package)
WITH m1,COUNT(*) AS count
WHERE count > 1
WITH m1,count
ORDER BY count DESC
RETURN m1.name as name, count
LIMIT { limit }
Why We Used a Graph Database
Much of what we've done would be possible with an RDBMS or a document database, so why do it in a graph database – specifically Neo4j? We found three major upsides while working on this project:- It is so much easier to map out data and relationships. Making relationships in RDBMSes work, even in simple cases, is harder, and significantly more difficult to change down the road. Compared to popular document databases, Neo4j relationships are done in the database -- we don't have to maintain them with application logic.
- Discovering how people and packages are connected is much easier and faster than with RDBMSes and popular document databases. Cypher and the graph model makes it easy to get the data we want without complex SQL joins or a wrapper script in another language.
- Trying new queries to explore the data is so convenient with Neo4j’s web interface. It's quick and easy to prototype and profile from there, and then copy and paste the Cypher into your app.
