18%
Total Score
100
64
100
The entire package is marked deprecated because it belongs to Apollo Server versions that are end-of-life, with no replacement package specified. This makes the release unfit for a new dependency despite other healthy project signals.
The package has 65 releases, but its latest release was about four years ago and it has had no releases in the last 12 months. That strongly supports the package-level deprecation concern.
The linked repository neither matches the package name nor mentions it in its README, creating some uncertainty about package-to-repository ownership. Its organization-backed monorepo context makes this less concerning than an unexplained repository mismatch.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
apollo-server-env Version ^4.2.1 | — | — |
@apollo/utils.keyvaluecache Version ^1.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.