graphiql

An graphical interactive in-browser GraphQL IDE.

Latest 5.4.0

82%

Total Score

healthy

Healthy release with strong maintenance and provenance, held back slightly by unpinned workflow actions and workflow hygiene findings.

Are you affected? Scan for Free

Health Score Breakdown

Workflow audit

All four workflows were analyzed and no untrusted checkout or script-injection paths were found. However, all 53 action references are unpinned, and high-confidence findings flag ad hoc package installation and trusted-publishing workflow hygiene; these are meaningful but not release-blocking on their own.

Vulnerabilities

Title	Versions	Severity
CVE-2021-41248 graphiql is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.5.0 - 1.4.7.	0.5.0 - 1.4.7	High

Package versions

Maintainers

Direct Dependencies

Dependency	Last Release	Score
@graphiql/react Version ^0.39.0	—	—
react-compiler-runtime Version 19.1.0-rc.1	—	—
@graphiql/plugin-history Version ^0.4.4	—	—
@graphiql/plugin-doc-explorer Version ^0.4.4	—	—