@graphql-tools/schema

Project backingcaution

The repository is owned by an individual account rather than an organization, so the concentrated contributor activity is not clearly buffered by formal organizational ownership.

Repo bus factorcaution

The top contributor made 71.7% of recent commits, a concentration risk; four other contributors were active, which partly offsets the reliance on one person.

Workflow auditcaution

All four workflows were analyzed with no audit findings or untrusted checkout and script-injection paths. However, two workflows use top-level write permissions and 8 of 22 action references are unpinned, leaving moderate workflow hygiene concerns.