Core engine for Apollo GraphQL server
88%
Total Score
83
94
100
100
Only 2 commits were recorded in the last 3 months, which is light activity for a major server project, although release history shows the package is still being published.
The repository uses TypeScript, npm scripts, and Rollup, showing an established build process; no security-scanning tooling was detected, leaving a minor transparency gap.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2024-10211 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @apollo/server is vulnerable to Information Disclosure in versions 1.0.0 - 4.10.5. | 1.0.0 - 4.10.5 | Medium |
| Dependency | Last Release | Score |
|---|---|---|
cors Version ^2.8.5 | — | — |
loglevel Version ^1.6.8 | — | — |
lru-cache Version ^11.1.0 | — | — |
negotiator Version ^1.0.0 | — | — |
async-retry Version ^1.2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.