A set of utils for faster development of GraphQL tools
86%
Total Score
healthy
Active releases, provenance, and repository maintenance outweigh the repository’s unclear package linkage and concentrated ownership.
The registry has five publishing accounts and a clear the-guild.dev domain, but urigo, ardatan, and enisdenjo publish from gmail.com accounts. These personal accounts create account-handoff risk even though they do not indicate limited maintenance capacity.
Seven contributors were active in three months, but the top contributor made 67.9% of commits. Because the repository owner is recorded as a user rather than an organization, this concentration remains a maintenance concern.
The linked repository name does not match the package and its README does not mention @graphql-tools/url-loader. A monorepo mismatch can be normal, but the absence of a README reference leaves package ownership less transparent.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ws Version ^8.21.3 | — | — |
tslib Version ^2.4.0 | — | — |
@types/ws Version ^8.18.2 | — | — |
sync-fetch Version 0.7.1 | — | — |
isomorphic-ws Version ^5.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.