@graphql-tools/import

Maintainerscaution

Five registry accounts can publish, but three use consumer Gmail addresses rather than the primary the-guild.dev domain; this is an account-hygiene caution, not evidence of limited maintenance capacity.

Repo bus factorcaution

Seven contributors were active, but ardatan supplied about 68% of commits in the last three months, leaving meaningful concentration risk despite other active contributors.

Workflow auditcaution

All four workflows were analyzed with no audit findings or untrusted checkout/script-injection issues. However, 8 of 22 action references are unpinned and two workflows grant top-level write permissions, so workflow hygiene warrants caution.