@graphql-codegen/typescript

Maintainerscaution

The package has five publish-capable accounts, but ardatan, kamilkisiela, and urigo use consumer Gmail addresses alongside the the-guild.dev accounts, creating account-hygiene risk.

Repo bus factorcaution

Five contributors are active, but the top contributor made 64.5% of recent commits; the second contributed 31.8%, so activity is concentrated but not isolated.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations and response guidance less transparent.

Workflow auditcaution

All seven workflows were analyzed with no untrusted checkout or script-injection findings and all 27 action references pinned. One medium-confidence archived action is a hygiene concern, while the trusted-publishing finding is an explicit workflow caution.