@urql/exchange-retry

Release historycaution

The package has 64 releases since March 2020, but none in the last 12 months; the latest release was over a year before collection. This is a maintenance concern, though repository activity remains present.

Repo package mentioncaution

The repository name does not match the package and its README does not mention this package, so package-to-source ownership is less transparent. The broader repository structure indicates a monorepo, which partly explains the name mismatch but not the missing mention.

Repo toolingcaution

The project uses established build and test tooling, but no security scanning tools were detected. This is a modest transparency gap rather than a dependency blocker.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations less explicit for users.

Workflow auditcaution

All three workflows were analyzed successfully and use pinned actions without untrusted checkouts or script injection. A high-confidence low-severity adhoc-packages finding in the release workflow is still a workflow hygiene concern.