@graphql-tools/executor-graphql-ws

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, so the linkage is not transparent and the package may be a subpackage or otherwise hosted in a broader repository without an explicit reference.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting and disclosure expectations less transparent.

Token permissionscaution

All six workflows lack top-level token permissions declarations. No workflow has top-level write permissions, which limits the severity, but explicit least-privilege defaults are still absent.