graphology-utils

Release historycaution

The package has 31 releases over roughly 10 years, but its latest registry release was in April 2022 with no releases in the last 12 months. The active repository partly compensates for this age, but the assessed release is stale.

Repo package mentioncaution

The repository name does not match graphology-utils and its README does not mention the package, so the linkage is less transparent than expected; the monorepo file tree provides some compensating context.

Repo toolingcaution

The project uses npm scripts, Rollup, TypeScript, and Babel, indicating an established build process, but no security scanning tools were detected.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were analyzed successfully with no untrusted checkout or script-injection paths, but all eight action references are unpinned and a high-confidence audit found ad hoc package installation outside a lockfile. These are workflow hygiene risks rather than standalone severe risks.