@graphql-tools/code-file-loader

Maintainerscaution

Five registry publishers are listed, with two using the the-guild.dev domain and three consumer-email accounts (urigo, ardatan, and enisdenjo) using gmail.com; this is an account-hygiene caution, not evidence of limited maintenance capacity.

Repo bus factorcaution

Seven contributors are active, but the top contributor made about 68% of recent commits; because the repository owner is an individual rather than an organization, this concentration is a genuine continuity caution.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package, leaving some uncertainty that the linked repository directly owns this artifact; the monorepo structure partly explains the mismatch but does not remove it.

Workflow auditcaution

All four workflows were audited with no findings and no untrusted checkouts or script injections. Eight of 22 action references are unpinned and two workflows have top-level write permissions, so workflow hygiene is good but not optimal.