# neo4j — diamond recursion CWE-407 scan: CLEAN

## Scan date: 2026-03-29

## Method scanned

`graph-algo` package: `ShortestPath`, `Dijkstra`, `SingleSourceShortestPath*` — all use
explicit frontier/visited sets (BFS/Dijkstra state maps).

Kernel schema/type hierarchy: no recursive parent-traversal methods found.
Java class hierarchy traversal uses `Class.getSuperclass()` which is bounded by the
Java class hierarchy depth (tree, not DAG at the Java level).

## Verdict: CLEAN
