@graphql-codegen/add

Repo toolingcaution

The project uses TypeScript, Vitest, Babel, and npm scripts, but no security-scanning tools were detected. That is a modest security-hygiene gap rather than evidence of abandonment.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations unclear despite the project's active maintenance.

Workflow auditcaution

All six workflows were analyzed with no untrusted checkouts, script injection, or unpinned action references. The audit still found a high-confidence archived action and trusted publishing, so workflow hygiene warrants caution.