@octokit/plugin-paginate-graphql

Release historycaution

The package has 19 releases since September 2022, but none in the last 12 months; the latest release was over a year ago. This lowers confidence in ongoing maintenance, though the prior release cadence was active.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Its recent push helps, but does not demonstrate sustained development activity.

Security policycaution

The repository has no security policy. This is a transparency and maintenance gap, although CodeQL scanning provides some compensating security practice.

Workflow auditcaution

All six workflows were analyzed with no reported audit findings or untrusted checkouts, but all 15 action references are unpinned and two workflows grant top-level write permissions. The pinning gap is a meaningful supply-chain hygiene concern, while the write permissions are only a mild caution without an untrusted sink.