@apollo/server-gateway-interface

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving publication origin less verifiable than it could be.

Dependency profilecaution

The package declares four runtime dependencies despite containing no runtime code, adding dependency surface to an otherwise type-focused package.

Release historycaution

There have been 12 releases since August 2022, but none in the last 12 months. The linked repository remains active, partly compensating for the sparse registry cadence, but the gap still lowers confidence in ongoing package publishing.

Repo commit activitycaution

Only two commits were recorded in the last three months. That is light activity, although the repository is current and the package is maintained within a larger organization-backed project.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, so ownership of this specific package is less transparent even though the organization backing is credible.