@graphql-tools/git-loader

Maintainerscaution

Five accounts can publish, with two using the project domain, but urigo, ardatan, and enisdenjo publish through Gmail accounts. Those consumer accounts create account-hygiene risk even though repository activity shows multiple active contributors.

Repo bus factorcaution

Seven contributors were active, but ardatan authored about 68% of the 84 commits. The active secondary contributors partly compensate, but ownership remains concentrated.

Repo package mentioncaution

The repository name does not match this package and its README does not mention the package, so the package-to-repository relationship is less transparent. A monorepo can explain the name mismatch, but the missing README reference remains a caution.

Workflow auditcaution

All four workflows were analyzed successfully with no auditor findings, no untrusted checkouts, and no script injection. Eight of 22 action references are unpinned and two workflows grant top-level write permissions, so workflow hygiene is good but not perfect.