The shared core for the highly customizable and versatile GraphQL client
82%
Total Score
healthy
Healthy: an actively maintained, organization-backed project with recent releases and transparent publishing.
The repository uses established build and test tooling, but no security scanning tools were detected, leaving a modest security-process gap.
No repository security policy was found, which makes vulnerability reporting and response expectations less transparent.
All three workflows were analyzed with no untrusted checkout, script injection, or unpinned action findings, but the release workflow has a high-confidence low-severity adhoc package installation outside a lockfile.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
wonka Version ^6.3.2 | — | — |
@0no-co/graphql.web Version ^1.0.13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.