Package Health

@apollo/explorer

This repo hosts the source for Apollo Studio's Embeddable Explorer

Latest 3.7.4NPMNPM

64%

Total Score

caution

Usable with caveats: repository commit activity has stopped for three months despite a recent push.

Are you affected? Scan for Free

Health Score Breakdown

Release historycaution

The package has 35 releases since February 2022, but only one release in the last 12 months, indicating a materially slower cadence for an established package.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, a significant maintenance concern despite the recent push timestamp.

Repo issue activitycaution

There were no new or closed issues and no merged pull requests in the last month, while eight issues and 19 pull requests remain open, suggesting limited recent project throughput.

Repo toolingcaution

The repository uses TypeScript, npm scripts, Rollup, and Babel for builds, but no security scanning tools were detected, leaving a modest transparency and hygiene gap.

Workflow auditcaution

All three workflows were analyzed and none has untrusted-checkout or script-injection findings, but all seven action references are unpinned and a high-confidence audit found ad hoc package installation.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2025-10672 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
@apollo/explorer is vulnerable to Cross-Site Request Forgery (CSRF) in versions 1.0.0 - 3.7.3.
1.0.0 - 3.7.3
Medium

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
graphql-ws
Version ^5.9.0
—
—
whatwg-mimetype
Version ^3.0.0
—
—
zen-observable-ts
Version ^1.1.0
—
—
@types/whatwg-mimetype
Version ^3.0.0
—
—
subscriptions-transport-ws
Version ^0.11.0
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
4 years ago
Unpacked Size
0.2 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform