79%
Total Score
healthy
Frequent releases, active repository work, and strong packaging outweigh workflow and account-hygiene cautions.
Five accounts can publish, but three use consumer Gmail addresses: ardatan, kamilkisiela, and urigo. The two the-guild.dev accounts provide some account continuity, while the personal-domain accounts remain an account-hygiene caution.
The repository owner is recorded as a user rather than an organization, so the available backing signal does not establish institutional maintenance coverage.
Five contributors were active, but the top contributor made about 65% of recent commits. The remaining contributors, including one with about 32%, provide meaningful though uneven coverage.
The repository name does not match this package and its README does not mention @graphql-codegen/core. Although a monorepo subpackage can commonly differ in name, the missing explicit mention leaves package ownership less transparent.
No repository security policy was found, leaving vulnerability reporting expectations and response procedures undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tslib Version ^2.8.0 | — | — |
@graphql-tools/utils Version ^12.0.3 | — | — |
@graphql-tools/schema Version ^10.1.3 | — | — |
@graphql-codegen/plugin-helpers Version ^7.4.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.