@apollo/sandbox

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, a meaningful maintenance slowdown despite the repository remaining unarchived and the package having recent release history.

Build provenancecaution

No build attestation or staged-publishing provenance is available, so consumers cannot independently verify how the published artifact was produced.

Dependency profilecaution

Six runtime dependencies form a moderate dependency surface for an embeddable browser and React package; this is a manageable but nontrivial amount of inherited maintenance.

Maintainerscaution

Only one registry publishing account, apollo-bot, is listed. This is less concerning because the linked repository is owned by an organization, but it still provides little direct evidence about registry-side redundancy.

Repo issue activitycaution

There were no new or closed issues and no merged pull requests during the last month, while 19 pull requests remain open. This suggests weak recent issue and review throughput.