This is a healthy, actively maintained release with strong maturity and publication evidence: it has a long release history, 629 releases in the last 12 months, current non-prerelease major-version stability, npm provenance, active repository development, 13 active contributors, tests and changelog coverage in the repository, and an organization-backed project. The main concern is repository transparency: the linked repository is named `gateway` and neither matches nor mentions this package, which makes package-to-source ownership less direct. Missing repository security policy and incomplete top-level workflow permission declarations are additional hygiene gaps, but they do not outweigh the strong maintenance and build evidence.
86%
Total Score
100
100
94
80
100
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tslib Version ^2.8.1 | — | — |
dataloader Version ^2.2.3 | — | — |
@graphql-tools/utils Version ^12.0.1 | — | — |
@repeaterjs/repeater Version ^3.0.6 | — | — |
@graphql-tools/schema Version ^10.1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.