@graphql-codegen/cli

Maintainerscaution

Five accounts can publish, including two using the the-guild.dev domain and three named accounts using gmail.com addresses: ardatan, kamilkisiela, and urigo. The company-domain accounts provide some continuity, but the outside mailbox accounts are an account-hygiene caution.

Project backingcaution

The repository owner is an individual account rather than an organization account, so organizational handoff capacity cannot be credited. The active maintainers and release history still provide substantial backing evidence.

Repo bus factorcaution

Five contributors were active, but the top contributor made 64.5% of recent commits and the second made 31.8%. The active second contributor partly offsets the concentration, but the project still has a meaningful contributor-continuity caution.

Security policycaution

The linked repository has no security policy file, leaving vulnerability-reporting and response expectations unclear. This is a transparency gap, though it is not evidence of abandonment by itself.

Workflow auditcaution

All seven workflows were analyzed, all 27 action references are pinned, and no untrusted checkout or script-injection paths were found. However, the audit reports a high-confidence archived action and trusted publishing using a long-lived registry token, so workflow hygiene remains a caution.