@graphql-tools/load

Maintainerscaution

The package has five publishing accounts and a clear the-guild.dev domain, but urigo, ardatan, and enisdenjo publish through Gmail accounts; this is an account-hygiene caution, not evidence of limited maintenance capacity.

Repo bus factorcaution

Seven contributors were active in three months, but ardatan made about 68% of commits; this is a maintenance concentration concern, though other active contributors provide some resilience.

Repo package mentioncaution

The repository name does not match @graphql-tools/load and its README does not mention the package, so the linkage is less transparent; the broader repository may still be a monorepo source.

Workflow auditcaution

All four workflows were analyzed with no audit findings, unsafe checkout, or script injection. Eight of 22 action references are unpinned and two workflows grant top-level write permissions, which are mild hygiene concerns without an untrusted trigger or sink.