altair-graphql-core

Dependency profilecaution

The package declares 27 runtime dependencies, including several GraphQL and client integrations; this is a meaningful dependency surface but not inherently unhealthy.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, creating some uncertainty about package-to-repository alignment; the organization context is partially reassuring but does not remove the gap.

Workflow auditcaution

All 15 workflows were analyzed, all use read-only permissions, and all 126 action references are pinned. Three low-confidence cache-poisoning findings are hygiene-level, while one high-confidence archived action warrants caution.