@graphql-tools/mock

Maintainerscaution

Five publish accounts are listed, but three use consumer Gmail addresses—urigo, ardatan, and enisdenjo—rather than the primary the-guild.dev domain. This is account-handoff hygiene risk, not evidence of limited maintenance capacity.

Repo bus factorcaution

Seven contributors were active, but the top contributor made about 68% of recent commits. This is a real concentration risk, especially because the repository owner is recorded as an individual rather than an organization.

Workflow auditcaution

All four workflows were analyzed with no audit findings, no untrusted checkouts, and no script injection. Eight of 22 action references are unpinned and two workflows grant top-level write access, so workflow hygiene is not perfect but remains a minor concern.