@graphql-tools/code-file-loader

Maintainerscaution

Five accounts can publish, with two using the project domain and three using Gmail accounts (urigo, ardatan, and enisdenjo). The outside mailbox accounts are an account-hygiene caution, not evidence of limited maintenance capacity.

Repo bus factorcaution

Eight contributors were active recently, but the top contributor made 62.5% of commits. The remaining active contributors provide meaningful backup, so this is only a mild concentration concern.

Repo package mentioncaution

The repository name does not match the package and its README does not mention this package. That is plausible for a monorepo subpackage, but the missing explicit mention leaves some uncertainty that this repository is the package's exact home.

Version stabilitycaution

Version 8.1.41 is a stable major release and is not a prerelease, although the recent prerelease share of 90% warrants some caution about the surrounding release stream.

Workflow auditcaution

All four workflows were analyzed with no reported findings, no untrusted checkout or script-injection paths, and only 8 of 22 action references unpinned. Two workflows have top-level write permissions, a mild hygiene concern but not a severe risk here.