@graphql-tools/github-loader

Repo bus factorcaution

The top contributor made 62.5% of recent commits, which is concentrated, but seven other contributors were active during the same three-month period.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package, so the linkage is less transparent; the package may be a monorepo subpackage, but that is not demonstrated by this signal.

Workflow auditcaution

All four workflows were analyzed with no findings or untrusted-checkout sinks. Two workflows grant top-level write access and 8 of 22 action references are unpinned, creating modest workflow hygiene risk.