@graphql-typed-document-node/core

Release historycaution

Version 3.2.0 was published over three years ago, with no releases in the last 12 months. This raises freshness and abandonment concerns, although the linked repository was pushed recently.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. That is a maintenance warning, despite the separate recent repository push signal.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap, but it is not evidence of an unsafe release by itself.

Workflow auditcaution

All three analyzed workflows use unpinned actions, which weakens build reproducibility. The audit found no dangerous triggers, untrusted checkouts, script injection, or high-severity findings, so this remains a hygiene concern.