@graphql-codegen/gql-tag-operations

Maintainerscaution

Five registry accounts can publish, with the primary domain belonging to the project organization. Three listed consumer-domain accounts are ordinary account-hygiene caution, but they do not by themselves indicate weak maintenance capacity.

Project backingcaution

The source repository is owned by a user account rather than an organization account, so concentrated activity is not backed by explicit organization ownership. The active repository evidence still supports the project overall.

Repo bus factorcaution

Five contributors were active in the last 3 months, but the leading contributor made 64.5% of commits. A second contributor supplied 31.8%, which materially reduces but does not eliminate concentration risk.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package. Because this is a sub-package-style name, the mismatch may be normal, but the absence of a README mention leaves some ownership ambiguity.

Security policycaution

The repository has no published security policy. This is a transparency gap for reporting vulnerabilities, though it is partly offset by active maintenance and Dependabot scanning.