Package Health/@apollo/utils.stripsensitiveliterals

@apollo/utils.stripsensitiveliterals

Remove literals from an AST which might contain PII (strings and numbers, and optionally lists and objects)

Latest 3.0.0

NPM

60%

Total Score

caution

Usable with caveats: the release is over three years old and recent repository commit activity is absent.

Health Score Breakdown

Build provenance

No build attestation or trusted-publisher provenance is present, leaving the published artifact's build origin less transparent.

Release history

The package has six releases since February 2022, but its latest registry release was April 2023 and there were no releases in the last 12 months. That is a meaningful maintenance concern for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months. This is strong evidence of currently limited development activity, even though the repository is not archived.

Repo package mention

The repository name does not match the package name and its README does not mention the package. Organizational backing partly reduces concern, but this still leaves uncertainty about the exact package-to-repository relationship.

Repo tooling

The repository uses TypeScript and npm build tooling, but no security-scanning tools were detected. The build setup is established, while security-process visibility is limited.