@graphql-tools/executor-http

Lifecycle scriptscaution

A prepack lifecycle script is present, so publication involves an automated build step. This is not inherently unhealthy, but it warrants normal review of the build process.

Repo package mentioncaution

The repository name does not match the package, and its README does not mention the package, so the link may represent a broader or mismatched project rather than clearly backing this release.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting guidance and security response expectations unclear.

Token permissionscaution

All six workflows lack top-level token-permission declarations, which reduces least-privilege transparency even though none declares top-level write permissions.

Version stabilitycaution

Version 3.4.1 is a stable major release and is not a prerelease, although the recent prerelease share is high at 85%, which adds some release-process caution.