@graphql-codegen/typed-document-node

Maintainerscaution

The package has five publishing accounts and a clear the-guild.dev domain, but ardatan, kamilkisiela, and urigo publish through gmail.com accounts. Those accounts are an account-hygiene concern even though they do not by themselves show limited maintenance capacity.

Repo bus factorcaution

Five contributors were active recently, but the top contributor made about 64% of commits. The second contributor remains substantial at about 33%, so this is concentration rather than abandonment.

Repo package mentioncaution

The repository name does not match the package name, and its README does not mention this package. Although a monorepo name mismatch can be normal, the absence of both links makes package ownership less transparent.

Security policycaution

The repository has no published security policy. This does not show a security defect, but it leaves vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

All seven workflows were analyzed with no untrusted checkout or script-injection findings, and all 30 action references are pinned. The audit found a high-confidence archived action and use of trusted publishing, warranting workflow-hygiene caution.